Static task
static1
Behavioral task
behavioral1
Sample
NEAS.596788e216e6916ccdc6d998bc001ec0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.596788e216e6916ccdc6d998bc001ec0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.596788e216e6916ccdc6d998bc001ec0.exe
-
Size
651KB
-
MD5
596788e216e6916ccdc6d998bc001ec0
-
SHA1
7fcdb6ece99effff2c019e5ec626b5bde78d897a
-
SHA256
fa752920fbda18e3de493e3543579d5ce77768b6d9f794d9a165a315cd2d8c59
-
SHA512
352292e20e2a522824d6999fa6765efcb5561c77a8d4414f1000770433bb23dcfb10e4002a9aa1cde40c03c0179ed8bd2945dec0843ee7dc71d82643f79705e1
-
SSDEEP
3072:iCaoAs1k1Pol0xPTM7mBCAdJSSxPUkl3ViFNdAMQTCk/dN92sdNhavtrVdewnAxS:iqDwwl0xPTMiB9JSSxPUKIWdod3Xm0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.596788e216e6916ccdc6d998bc001ec0.exe
Files
-
NEAS.596788e216e6916ccdc6d998bc001ec0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 513KB - Virtual size: 564KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE