Static task
static1
Behavioral task
behavioral1
Sample
NEAS.34b90e5e2d10b264d660f575ccd74220.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.34b90e5e2d10b264d660f575ccd74220.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.34b90e5e2d10b264d660f575ccd74220.exe
-
Size
6.3MB
-
MD5
34b90e5e2d10b264d660f575ccd74220
-
SHA1
0d9ab19a2d73c9c5b44af2b402e3076e20248146
-
SHA256
b422ac9edf4150e75cd7fdb1f99645907f6159f9612f2c84ba4baaf9b5dd2c19
-
SHA512
6781c4e8e4e7a9100a43537e7a208ceb6c65dd6e7ea7f7227396070f20fcfacf2be36742905cd1acbedbdee63673ba38c880514910f1893e33a4062699453e8b
-
SSDEEP
196608:v52KiK/e7nsHSihD6QFzApS2z0EV5xqr0Z:v5Hsbm6QFMSKIgZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.34b90e5e2d10b264d660f575ccd74220.exe
Files
-
NEAS.34b90e5e2d10b264d660f575ccd74220.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ