Static task
static1
Behavioral task
behavioral1
Sample
NEAS.79b1c16890c51bcda629c3db8c0bb4f0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.79b1c16890c51bcda629c3db8c0bb4f0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.79b1c16890c51bcda629c3db8c0bb4f0.exe
-
Size
14KB
-
MD5
79b1c16890c51bcda629c3db8c0bb4f0
-
SHA1
f8ae63a70dfcd64261b62a5da1f87fb4c61c3541
-
SHA256
f5b7311850a5a1e814724ff9c1cec447f66627e922ddf16010e68fbce6fc7d24
-
SHA512
6481d1fc2074984a964ccf0c35dfb6d5cdd53775e161b7f1a1006e77004ca722d653d7f38c6dcba34bd6729d5f6c0f0c061cfca421dc0c3a6d0fce75eb5f08d4
-
SSDEEP
384:17KrGjtGGMpbNmtn1bdBTMBTMBTMBTMBTMBTMBTMBTMBTMBTMBTMBTMBTMBTMBTM:gza500000000000000e5U3fAOhhhh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.79b1c16890c51bcda629c3db8c0bb4f0.exe
Files
-
NEAS.79b1c16890c51bcda629c3db8c0bb4f0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ