Static task
static1
Behavioral task
behavioral1
Sample
NEAS.253797274a9b162bbe6a865acfcb5d2060789675e87d56c1c4ca12347a465aee.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.253797274a9b162bbe6a865acfcb5d2060789675e87d56c1c4ca12347a465aee.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.253797274a9b162bbe6a865acfcb5d2060789675e87d56c1c4ca12347a465aee.exe
-
Size
485KB
-
MD5
8a2fbfd71bcacd518d809d159b9e8864
-
SHA1
ba9fb3c3a0ff5ce4cdc59d9062bb7e70b9bd0873
-
SHA256
253797274a9b162bbe6a865acfcb5d2060789675e87d56c1c4ca12347a465aee
-
SHA512
da996dad2bb9d3f8d516f4bec866e67a841300e5d26e930c63c031938146c58149fee51f4e6e95d800634e13741cc1f9b2cd8654f250bb68629e81e977ef97ca
-
SSDEEP
12288:Gc7mggxEsFir9auX83nLLHq9vOstZRaS/+Mk:iJ8hM77q9GsbR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.253797274a9b162bbe6a865acfcb5d2060789675e87d56c1c4ca12347a465aee.exe
Files
-
NEAS.253797274a9b162bbe6a865acfcb5d2060789675e87d56c1c4ca12347a465aee.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 481KB - Virtual size: 480KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ