Static task
static1
Behavioral task
behavioral1
Sample
NEAS.67c0180237864165b26a543171c76d4dd073378a97ad7b2630ac062f8bc41808.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.67c0180237864165b26a543171c76d4dd073378a97ad7b2630ac062f8bc41808.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.67c0180237864165b26a543171c76d4dd073378a97ad7b2630ac062f8bc41808.exe
-
Size
359KB
-
MD5
63d6c0e8939f39fc8994f33f4e614c8c
-
SHA1
c8b923d4ea1c1c215b26b0105dc5c04c4243f18d
-
SHA256
67c0180237864165b26a543171c76d4dd073378a97ad7b2630ac062f8bc41808
-
SHA512
3790151d8b5c41e0d02e1764bbce8157b51d54e5609647b4c6caddcaa090c641ae7f8505ad579d5125830a0095df6dc5f9c73ebb9dbc6c28ea9bda0134033abf
-
SSDEEP
6144:bDmad57Xedl33j3XxHNkz5938F45UjrP1yYV+u4P7t8U/r96XweW:bK1tkzze31+P7tj/r9zeW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.67c0180237864165b26a543171c76d4dd073378a97ad7b2630ac062f8bc41808.exe
Files
-
NEAS.67c0180237864165b26a543171c76d4dd073378a97ad7b2630ac062f8bc41808.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 357KB - Virtual size: 356KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ