Static task
static1
Behavioral task
behavioral1
Sample
NEAS.afea915e5f871b74cf88ae6f91f61540.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.afea915e5f871b74cf88ae6f91f61540.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.afea915e5f871b74cf88ae6f91f61540.exe
-
Size
373KB
-
MD5
afea915e5f871b74cf88ae6f91f61540
-
SHA1
c38d1d70df125a8a93ca5d0f2d138b16dd56218c
-
SHA256
c421a740cd2e5bd3f418e48735b683cf6281360368aba5bfa7f4c7ddf368986a
-
SHA512
aa984158a545d848f859889a99652300db59459d382b0991d8ae48bf651b5fb7fbca9f41301e89946d9fadd73b91ee7ceecea8291fd868a25c3a0256e7d0226c
-
SSDEEP
6144:sm5UsluzKOkwWcSxJVuftLM6DV/+oO02IYiiVg4Iw75diqOhAmJiv27g8x41C1:smqslOKHwSAtXKZeqORW27D4o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.afea915e5f871b74cf88ae6f91f61540.exe
Files
-
NEAS.afea915e5f871b74cf88ae6f91f61540.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
yzPzORmq Size: 61KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TGOqOPny Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��{� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE