Static task
static1
Behavioral task
behavioral1
Sample
NEAS.0385904cea8561c80ac1774677a60520.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.0385904cea8561c80ac1774677a60520.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.0385904cea8561c80ac1774677a60520.exe
-
Size
1.4MB
-
MD5
0385904cea8561c80ac1774677a60520
-
SHA1
0a1dc4453e2435f50ce09fab5b155e74a7ed839f
-
SHA256
6b5ac1980edf519b75f741cacd2613e4dbee6755f4d9b8ee401405cb7aeae9ba
-
SHA512
b8fe2ad4fadc1d51ef4b2e26ae802803c04d1a0b5c5ec73b6962222688686f4d73329f276a8843976fdcd170604ef92bba5b564c1566294a3c765d46d982e183
-
SSDEEP
24576:oWYA/cRwB9OOokfSnbJ0tRObG1douFHgSSX6seXB1v489xHXmZTNx80B6P:VRW2QOoxU1uOHgCfKcWd3/4P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0385904cea8561c80ac1774677a60520.exe
Files
-
NEAS.0385904cea8561c80ac1774677a60520.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE