Static task
static1
Behavioral task
behavioral1
Sample
NEAS.6447b2f1eb87d58e64097649fdef6980.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.6447b2f1eb87d58e64097649fdef6980.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.6447b2f1eb87d58e64097649fdef6980.exe
-
Size
14KB
-
MD5
6447b2f1eb87d58e64097649fdef6980
-
SHA1
8328356bf2fb8bbd897b29a421b316dff6871eb8
-
SHA256
8bff452519e99302ed0fd5cb5dc133159e40db993cb58dc8dbf5e7db9dcb0a94
-
SHA512
431314c08b568c7f603d380cda1da679cadd9ce37d6e3b1ea4b5107c1903e4e3f6fe3862ed7211e261cdde0d446193222782b6468ed872933e195c5c06f212cd
-
SSDEEP
384:FFIPWnnr444444CMy6abRv2DE045H4111:FFIO444444aRvcA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.6447b2f1eb87d58e64097649fdef6980.exe
Files
-
NEAS.6447b2f1eb87d58e64097649fdef6980.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ