Static task
static1
Behavioral task
behavioral1
Sample
NEAS.41dab90149ea4520fbd4ed829f6a0e30.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.41dab90149ea4520fbd4ed829f6a0e30.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.41dab90149ea4520fbd4ed829f6a0e30.exe
-
Size
328KB
-
MD5
41dab90149ea4520fbd4ed829f6a0e30
-
SHA1
2b501de2d23f5e44252e9b3bd8cacd2ad32e5e1f
-
SHA256
3571c1345d3a0a1ca9c65b46e3aa3616d92f5b748eb496b256df25be3ecfddce
-
SHA512
ef2e35a4c9b12c2c0b2b4ce7b65ec6949cfb5b8825d20833d622e67bd755e4a47fb24f1c129169f1d97ea9bd00225d6a436af53043984e69e82fe599b40b8f57
-
SSDEEP
6144:M/eHariXUU5EYCTvaBjRjWrLJKuKnGML5Njcx:qyXUusvalgg5Nja
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.41dab90149ea4520fbd4ed829f6a0e30.exe
Files
-
NEAS.41dab90149ea4520fbd4ed829f6a0e30.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 185KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 116KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE