Static task
static1
Behavioral task
behavioral1
Sample
NEAS.30a88fb96559201db46e39cb9cd33a50.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.30a88fb96559201db46e39cb9cd33a50.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.30a88fb96559201db46e39cb9cd33a50.exe
-
Size
40KB
-
MD5
30a88fb96559201db46e39cb9cd33a50
-
SHA1
e0d902b0d7787b4590ee2180132dabd07d8870dd
-
SHA256
220ee048b0de32eb463ebca45e7c1aeb61ef367d22bcf1ec37f22ce278b720e1
-
SHA512
fb29c3802fcf5f369d7b02408286b33c7d8c7b9e34760d6d30c270b2751478784526c7f76f001f16f371e61bc249977b92e61d73f2122764c8d0c91dd29e969a
-
SSDEEP
384:8Vv2ag75hGbzs5oEKargptuwhVfzp/DE045H:8Vv2ag7JIarcBzxA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.30a88fb96559201db46e39cb9cd33a50.exe
Files
-
NEAS.30a88fb96559201db46e39cb9cd33a50.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ