Static task
static1
Behavioral task
behavioral1
Sample
NEAS.29747217bce30303d61906054f220ec42a5895938db61bf39d1b541db15ac47b.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.29747217bce30303d61906054f220ec42a5895938db61bf39d1b541db15ac47b.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.29747217bce30303d61906054f220ec42a5895938db61bf39d1b541db15ac47b.exe
-
Size
575KB
-
MD5
19729373758e98a38c4f301f2833cb69
-
SHA1
a70acd01068ce4808175ff389f475b19e453853d
-
SHA256
29747217bce30303d61906054f220ec42a5895938db61bf39d1b541db15ac47b
-
SHA512
225e598cb2ed5adc5ec6ccc3f4e584ea98992667bfa345abbb2b883459262c51ad4192dd20df78b790cba4f9b4ec6b6b4f90f70731d3311ef5f903b75d871365
-
SSDEEP
12288:qcJvgH1tA05UubjAIVZKYETm57K8yD7FwASlxoZ75aMuT:iiojAIVgM5O8yDLgxUcMuT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.29747217bce30303d61906054f220ec42a5895938db61bf39d1b541db15ac47b.exe
Files
-
NEAS.29747217bce30303d61906054f220ec42a5895938db61bf39d1b541db15ac47b.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 571KB - Virtual size: 570KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ