Static task
static1
Behavioral task
behavioral1
Sample
NEAS.41b8a012d8dd2aa525aa05e5d296e13d4994110cefa41068adfb80eec0e3efe7.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.41b8a012d8dd2aa525aa05e5d296e13d4994110cefa41068adfb80eec0e3efe7.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.41b8a012d8dd2aa525aa05e5d296e13d4994110cefa41068adfb80eec0e3efe7.exe
-
Size
278KB
-
MD5
a2bb76f69192f8d5e0c9c3b15b4463df
-
SHA1
b56d534cc381e903c00b72b51303750e06438d96
-
SHA256
41b8a012d8dd2aa525aa05e5d296e13d4994110cefa41068adfb80eec0e3efe7
-
SHA512
88d83f30b62aa864b53df6c968b38dd1c84f8e857daca534e53c8d2d11860dac74cb26e11e42608723c9041c3bc3874094cd93122aa1c6aa29b152b033b0a50c
-
SSDEEP
3072:PeZVtkIrHcDjxjPDAf9wfBeO4ezEivjvG/tCC9/JMEu5b/pT+5PQt/stbd8Jb8Ji:iEzNfBe5oF5bhiPr8gD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.41b8a012d8dd2aa525aa05e5d296e13d4994110cefa41068adfb80eec0e3efe7.exe
Files
-
NEAS.41b8a012d8dd2aa525aa05e5d296e13d4994110cefa41068adfb80eec0e3efe7.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 276KB - Virtual size: 275KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ