Static task
static1
Behavioral task
behavioral1
Sample
NEAS.e3640ffd275a025e04b9a79aacfedcb0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.e3640ffd275a025e04b9a79aacfedcb0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.e3640ffd275a025e04b9a79aacfedcb0.exe
-
Size
14KB
-
MD5
e3640ffd275a025e04b9a79aacfedcb0
-
SHA1
f9b7bbacd3c79d61c36455e1f7726f10e5cb7e03
-
SHA256
be8503bfb697087db71531f44bd2cf91645ac383c8e95bdacadc568694cf2fdb
-
SHA512
0a22233bf6c8a7f80652b57214982ba0b0ddec7694dc7ddd2d13dacbdab326620cc80e9a2903ab8485130576d9133ad592f73d431c3c6efc3125da563e7d3033
-
SSDEEP
384:U3f6Tk2lZjOTzXgDIzJzLd786QbVh9lDE045Hldndndndn:UP6Tk2POTQUq9lABddd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e3640ffd275a025e04b9a79aacfedcb0.exe
Files
-
NEAS.e3640ffd275a025e04b9a79aacfedcb0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ