Static task
static1
Behavioral task
behavioral1
Sample
NEAS.3d6ddf3d8d6db03a816a90e0bc5806f0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.3d6ddf3d8d6db03a816a90e0bc5806f0.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.3d6ddf3d8d6db03a816a90e0bc5806f0.exe
-
Size
374KB
-
MD5
3d6ddf3d8d6db03a816a90e0bc5806f0
-
SHA1
a668bcc8515bb29c1d9933c806405e6e6225ab10
-
SHA256
eef0612fa3e570ea712eb8ba1a3f1b78d443b2441b2991e4cf086e5e2197d987
-
SHA512
2939f2f3c14fedb3a444d50a1abee6330e83406c5244ff919539d6554fb7d865e1d047a5e10e802e6696e854287e7dbe03bea81199cf9a8bfc060c54b0ea8835
-
SSDEEP
6144:zJSJx5I+7S4b+vZW3BIH2sYmxJQ0PeTeR54aZw5QKJG1S4v3SZw0iODRDhRTAUCG:zJMxy+7SM0ZWxevPMeRSau5QKJu9i2zc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.3d6ddf3d8d6db03a816a90e0bc5806f0.exe
Files
-
NEAS.3d6ddf3d8d6db03a816a90e0bc5806f0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ