Static task
static1
Behavioral task
behavioral1
Sample
NEAS.0336a108f4f4fe8659e3b8ec00c51110.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.0336a108f4f4fe8659e3b8ec00c51110.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.0336a108f4f4fe8659e3b8ec00c51110.exe
-
Size
440KB
-
MD5
0336a108f4f4fe8659e3b8ec00c51110
-
SHA1
4589715179e698ad383cbc8dd5d07edcdd927079
-
SHA256
1e94c582e0d31ba1adcb75ccf0b4ebce827f09734dca470616d9d82e368f1e7b
-
SHA512
15e0da4b1c9cae0ce009c2e57e96e0c2561bb39b33e83da95f379f17474793bb224d9ec8129039c5b3b75090c1da464e78cc8629d192ba980f33f8b590d40e12
-
SSDEEP
6144:cUbjcgyY5XqGDGGCmY0YEiImXwYHdBY3wU22mLSM224L:cTG3CmHYtzRwALFWM2B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0336a108f4f4fe8659e3b8ec00c51110.exe
Files
-
NEAS.0336a108f4f4fe8659e3b8ec00c51110.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 364KB - Virtual size: 363KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ