Static task
static1
Behavioral task
behavioral1
Sample
NEAS.6d79eb70ffca4e708b342d73207b1400.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.6d79eb70ffca4e708b342d73207b1400.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.6d79eb70ffca4e708b342d73207b1400.exe
-
Size
42KB
-
MD5
6d79eb70ffca4e708b342d73207b1400
-
SHA1
6d6b974c0c331522345177660e3a2c9610a58f5a
-
SHA256
6fbe90a6302eb4ca302784de0758291043c942378724a5c4f7bb8a8a5d566bc9
-
SHA512
43f9e30948a91690a1436f929a17ba8171b1a64d85799b79425f784ca432d452ac115efb578c36d477e1e4a9e24265fa690c2f5cfd79bd7fef7554826f272d66
-
SSDEEP
768:C/+8ldkxYXO5lsvhBznbcuyD7UTy3wy3BEywe0w:6+8ldkxOO5Sv/znouy8Tuzu0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.6d79eb70ffca4e708b342d73207b1400.exe
Files
-
NEAS.6d79eb70ffca4e708b342d73207b1400.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE