Static task
static1
Behavioral task
behavioral1
Sample
NEAS.2378ef1bbbb55c910d616b3d6c315420.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.2378ef1bbbb55c910d616b3d6c315420.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.2378ef1bbbb55c910d616b3d6c315420.exe
-
Size
40KB
-
MD5
2378ef1bbbb55c910d616b3d6c315420
-
SHA1
07d353d5a8810fe490e13c21e94b34af5eb8b1fe
-
SHA256
a255c127297ef6c2eccf7499923339ba53ef745152b94eff5b29c474e2f527ba
-
SHA512
76baaaefc266d692749980b7d9ba393f61d4f168486a79f2e64277523a773304cdd79b5241b71a8dbe612e84bff2517ca374630b543979a5952bd89b874d5809
-
SSDEEP
192:bG296/Y9w0zhHJayFjzDF8a8a8a8a8a8aSYYYYYYYuUfcbZL5pAOoMqDE045HQ:62Z9w09p1zWXXXXXkfsN6OorDE045H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.2378ef1bbbb55c910d616b3d6c315420.exe
Files
-
NEAS.2378ef1bbbb55c910d616b3d6c315420.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ