Static task
static1
Behavioral task
behavioral1
Sample
NEAS.fb68097618c9a38ee91b3dfe9fed4330.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.fb68097618c9a38ee91b3dfe9fed4330.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.fb68097618c9a38ee91b3dfe9fed4330.exe
-
Size
14KB
-
MD5
fb68097618c9a38ee91b3dfe9fed4330
-
SHA1
acae74c36c00e877e575ccc023dd901dc643a8a1
-
SHA256
772ddcc5f28c0d2ced4f018cc92876ed058f32f43150eb6188f8f563d7bfb9f9
-
SHA512
479ab7981be244943f13ba4657fe1e7c057fc7363b10d9a68a98d8e9056f48ca2510a047d8b1a2e0406125e987a629d6a1fe86e631716a891717ce0d103850c9
-
SSDEEP
384:HJoK7MwQ5JKgJ7ZRRRRM47gNDEMDE045H:HewMwQmghZRRRRM470ZA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.fb68097618c9a38ee91b3dfe9fed4330.exe
Files
-
NEAS.fb68097618c9a38ee91b3dfe9fed4330.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ