Static task
static1
Behavioral task
behavioral1
Sample
NEAS.35f18cc17446810179606e87d8ec98d0.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.35f18cc17446810179606e87d8ec98d0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.35f18cc17446810179606e87d8ec98d0.exe
-
Size
9.0MB
-
MD5
35f18cc17446810179606e87d8ec98d0
-
SHA1
b7147169840baacd105cb1958882deea01ec68ac
-
SHA256
068f4cb357deb8276c6ed7cd4c53b42629e87ab3d1e58c6d87aa6e0bb6f17161
-
SHA512
485030e2e9ec4c7d8ba547078e3ac7db2c98ef457a2062ef77f33fdffea9affabfaefa1b9afa15b363eb30697b746479bf84478a64a4f9bc82210ae8267f90ee
-
SSDEEP
49152:o/ymKml4A+nnrJz2hadnUJhdqt0XUd+nBUEqNcX68PxFledHXPHmhm9EDjKHeMNd:3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.35f18cc17446810179606e87d8ec98d0.exe
Files
-
NEAS.35f18cc17446810179606e87d8ec98d0.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ