Static task
static1
Behavioral task
behavioral1
Sample
NEAS.2128ee84c0e03060fd37d063dc0c9b80.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.2128ee84c0e03060fd37d063dc0c9b80.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.2128ee84c0e03060fd37d063dc0c9b80.exe
-
Size
41KB
-
MD5
2128ee84c0e03060fd37d063dc0c9b80
-
SHA1
90085014c1e2ec1ae095622aaa0abc08ced0b412
-
SHA256
ac768e3303a893d3b408bd54b768ec72993a57ffd475235848ce8ed3d935b2fd
-
SHA512
0768a5b348bdd1cf65dcc4c4ecd70a4ac57141698d66ddc86084799409c2e6d4d278cca052ce140c497f80c561b2b4d0b07ca504fff2d67ffccee91c15c032f5
-
SSDEEP
768:y7fJDatEhUGbSfT809ut28YfuwwyURRvUJ/Opu2KoVi:catV7nYtnBSZJ2u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.2128ee84c0e03060fd37d063dc0c9b80.exe
Files
-
NEAS.2128ee84c0e03060fd37d063dc0c9b80.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 315B - Virtual size: 315B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ