Static task
static1
Behavioral task
behavioral1
Sample
NEAS.f321a04f3e5e165005c37a5e881073b0.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.f321a04f3e5e165005c37a5e881073b0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.f321a04f3e5e165005c37a5e881073b0.exe
-
Size
1.2MB
-
MD5
f321a04f3e5e165005c37a5e881073b0
-
SHA1
4b167ff06684f04084e9e42048b2aa159174f525
-
SHA256
08a48a422365a2e1817ee6f5db27a424f06d2056e7b21bef17a4fa4edc174cbd
-
SHA512
fd5d8716e839c3a638c17ce8e16d0615980b4f8dfe826b102addd839c044826b9f0f0e0b2887c7f721ce9fdcf99e7576932054d7b70f7812875cb2eba0c7e5f3
-
SSDEEP
24576:zzqxG2Z9mIhQvq8wd7D7Mp0M+I+gCCWcJbYScsGf3PzTxNpM4jr1:XMmSdIc1lNpHx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.f321a04f3e5e165005c37a5e881073b0.exe
Files
-
NEAS.f321a04f3e5e165005c37a5e881073b0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ