Static task
static1
Behavioral task
behavioral1
Sample
NEAS.4a77d9232f14f9479e5e6c524387e120.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.4a77d9232f14f9479e5e6c524387e120.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.4a77d9232f14f9479e5e6c524387e120.exe
-
Size
100KB
-
MD5
4a77d9232f14f9479e5e6c524387e120
-
SHA1
dc9f667a5a31778ed09cac566ab1adab8280d58e
-
SHA256
b9b1872d0c155f3e3ac3cfdb0b93cc276430f6314b90da1d3ca389e81d41edf0
-
SHA512
d1db32f6e9f16dcef8ef1fb5483f5e57f3fc29e79067f81298ce251977d2ac42f9f9806b4c3576498199175ed59aa2d43dbb95a1e31ccdd8e47f4fecddd84ed8
-
SSDEEP
768:n/5inm+cd5rHemPXkqUEphjVuvios1rPr4adL0NqlJSU6i+pVQ1TTGfL:nRsvcdcQjosnvnX6hQ1E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.4a77d9232f14f9479e5e6c524387e120.exe
Files
-
NEAS.4a77d9232f14f9479e5e6c524387e120.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE