Static task
static1
Behavioral task
behavioral1
Sample
NEAS.6184ff3443ec7a285593273a59becfc0.exe
Resource
win7-20231023-en
General
-
Target
NEAS.6184ff3443ec7a285593273a59becfc0.exe
-
Size
1.2MB
-
MD5
6184ff3443ec7a285593273a59becfc0
-
SHA1
d66612979540afa05e77efc6b8ed527646da0bf8
-
SHA256
7fdaa2d9014b7ec1f7c9b851651909d1b4a137276376e1436c359ce435c18db2
-
SHA512
fcd24e33e79717502155363617ae082845951e165b0f1d96322d261606af84013d95b674133c11c597f66a8a4154dd5561ada33fd7c92091ae9e9fa85ade5315
-
SSDEEP
24576:1zcVdHBFT7bZsai6apMRE+2tA5JiQbSavT7BXZ7:1zcVrFPbZsaOMRUtALiaSavT1XZ7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.6184ff3443ec7a285593273a59becfc0.exe
Files
-
NEAS.6184ff3443ec7a285593273a59becfc0.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ