Static task
static1
Behavioral task
behavioral1
Sample
NEAS.429fdb1ca128f8fc36d21a6dd456c700.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.429fdb1ca128f8fc36d21a6dd456c700.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.429fdb1ca128f8fc36d21a6dd456c700.exe
-
Size
332KB
-
MD5
429fdb1ca128f8fc36d21a6dd456c700
-
SHA1
dddf1b973dd59f9a745ccbb30ebd7de9ce2b70e3
-
SHA256
a2aa2dbb5ba66f036a28c7d277f1e38e9e316746b1013b5ddb65123ce3fa57b1
-
SHA512
5931e460d5fa292793a2874ac3791192ffc95561673f7cf0904631ef87e4be035180d9d0c9670319d9876fd1c8f0b98b9c1dc13b0a138033e3258198eb8ed11c
-
SSDEEP
6144:zJSFI/CF6Yoh34GvCDveL6uOyHyKJH6r8eP6ShHYDz2ipDOMQLDXUKXk:zJckx30LPFh6qYDnDtQPUKXk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.429fdb1ca128f8fc36d21a6dd456c700.exe
Files
-
NEAS.429fdb1ca128f8fc36d21a6dd456c700.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ