Static task
static1
Behavioral task
behavioral1
Sample
NEAS.72c85948010f2a495628667a6a69d2a0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.72c85948010f2a495628667a6a69d2a0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.72c85948010f2a495628667a6a69d2a0.exe
-
Size
14KB
-
MD5
72c85948010f2a495628667a6a69d2a0
-
SHA1
90c9b5c51ec0ffc98da6185bb6d0f4395c5c8854
-
SHA256
9193335ba4d1e71df02c2a65c08949cc780924546e5bf06811e06c0bf971a7ae
-
SHA512
a7efe918ef52c50264c9eaebff10ffc7e0ae359fc7f174480b9dc2f52a2f8b74b1554ec3c04a9c4e428edcbd2813b9d7c3037efdcdf9ef5eb1717bc7f979d236
-
SSDEEP
384:YbvWWs5pUdbBUILqUw3JAH2X0AZw6EGRKov0kBgGW/FDE045H:YjW3Abr8ZG2LZw6/QKNCGuA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.72c85948010f2a495628667a6a69d2a0.exe
Files
-
NEAS.72c85948010f2a495628667a6a69d2a0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ