Static task
static1
Behavioral task
behavioral1
Sample
NEAS.305c28c0e281671f54dafe946be68aa0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.305c28c0e281671f54dafe946be68aa0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.305c28c0e281671f54dafe946be68aa0.exe
-
Size
14KB
-
MD5
305c28c0e281671f54dafe946be68aa0
-
SHA1
35d34647831aac1bc42cdebb4d3ddcc46abaa8ae
-
SHA256
f18554d44c06fb5e67a237827fa5d282e77fef8cd8fadc2dc676866c74b64777
-
SHA512
be929fdd26e68b945993a9384ea3abb9a61ba45e0e84e9f3e76b4e8f49a5e883b7b9dcade2e146c7596a302d4c0ef5b3dc64cc262a4fee44b443e5d7e40177c5
-
SSDEEP
384:94xXi5hMewkxnBnijJNhg64lumE3YUhiFXs0DE045HG9:OxXi5hMAnBijnhd4N/UhaJA89
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.305c28c0e281671f54dafe946be68aa0.exe
Files
-
NEAS.305c28c0e281671f54dafe946be68aa0.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ