Static task
static1
Behavioral task
behavioral1
Sample
NEAS.9d320e5357c432178c5d03c19299e050.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.9d320e5357c432178c5d03c19299e050.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.9d320e5357c432178c5d03c19299e050.exe
-
Size
396KB
-
MD5
9d320e5357c432178c5d03c19299e050
-
SHA1
7fd9ec37de0cb27cc8f7dfcdc064d3a3c6907888
-
SHA256
5d643f6a629e29fc9b23c8a6ede9dc39190cfec8c3d2b506e35267b87206acd7
-
SHA512
c6efea568cb0738776fdbdf9d7b993fce7cccf7bded09d794ff66d217e23333ed17e07c92c8efe936de05b5bead3fce59ed2157b4f2fce90af51b3b300a042b9
-
SSDEEP
3072:oVMfMIbIaw3J9et1G02GI0jJR+BC3K5eqU+BC3K5eqYroGOE9tog:FfMmMEtU10N7K70K7K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.9d320e5357c432178c5d03c19299e050.exe
Files
-
NEAS.9d320e5357c432178c5d03c19299e050.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 126KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 342B - Virtual size: 342B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc1 Size: 441B - Virtual size: 441B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE