Static task
static1
Behavioral task
behavioral1
Sample
NEAS.287b20b89c8a9e21d7c0dc84202c96a0.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.287b20b89c8a9e21d7c0dc84202c96a0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.287b20b89c8a9e21d7c0dc84202c96a0.exe
-
Size
441KB
-
MD5
287b20b89c8a9e21d7c0dc84202c96a0
-
SHA1
29b0a6d40daa3fd9c8ed73431ac0d31560069961
-
SHA256
6b1b5c8eb0b0c55f3b92ceb6ec4fc5341b52ca8c6b8036114386b63c5f7b6175
-
SHA512
7a44b6897e88a2f895d48f754109b0cee4bf6d4c027f845ed99c0316b853ec5becf08e46dd7c8c0c76075ba0f5f9db9a226d0a3914d4ce52d54133b6b5159bd0
-
SSDEEP
6144:PeHwXUU5EYCTvaBjRjWrLJKuKnGML5NjcxFSsQLH5A7:PyMUusvalgg5NjaFSsP7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.287b20b89c8a9e21d7c0dc84202c96a0.exe
Files
-
NEAS.287b20b89c8a9e21d7c0dc84202c96a0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 185KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 116KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE