Static task
static1
Behavioral task
behavioral1
Sample
NEAS.6cb46818a169f7504f43066b3273a540.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.6cb46818a169f7504f43066b3273a540.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.6cb46818a169f7504f43066b3273a540.exe
-
Size
10.0MB
-
MD5
6cb46818a169f7504f43066b3273a540
-
SHA1
d4ff3b81ac6814c80898e76a8aef4fa3d2e55541
-
SHA256
31e2da9c4da9481b0ee57310b1f6c42ed15860ab7e5d6718f763bcba0ce6bf7d
-
SHA512
4bc6b802d9367159fd20849ab0556a03180eb6a26f6f372f76e817bce6a7e4a72c7c3457350188b2e3d52092b022640de5a9e0a88d1fee31fa3108254b01f74f
-
SSDEEP
196608:iyEHW9RIfc5ByHP5VbegVf4KacHehE6Z2pYbI6pIbwn0UvoPh5:iM5BO5HVbUF2pYtWk0Uvc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.6cb46818a169f7504f43066b3273a540.exe
Files
-
NEAS.6cb46818a169f7504f43066b3273a540.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 83.2MB - Virtual size: 83.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 368KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ