Static task
static1
Behavioral task
behavioral1
Sample
NEAS.259916ba33c76404722900eb72f6b170.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.259916ba33c76404722900eb72f6b170.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.259916ba33c76404722900eb72f6b170.exe
-
Size
279KB
-
MD5
259916ba33c76404722900eb72f6b170
-
SHA1
ca562e912260d05ba04f3ad62f210960bc5187b0
-
SHA256
4f0e4f43c5d48d13f755cd2032b0db3aeaa984d673311dd1de0744e7ac0579b9
-
SHA512
bab431b3426708fcb46936a6a15ef84384042dbcb5e1513e3a6b19d50ebee1f38a24c4a8d9582328fd0d0b7b5c2200e671380698579026328e667cd3187f8ce8
-
SSDEEP
3072:R8ERv3zZZm5c4Sq+YN95wFT0z+QadjN3rOwRXENk+Y0yFNzlUu0VC:R8EZrm55Zt5wFwz+TdpRXENFTAkVC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.259916ba33c76404722900eb72f6b170.exe
Files
-
NEAS.259916ba33c76404722900eb72f6b170.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 253KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE