Static task
static1
Behavioral task
behavioral1
Sample
NEAS.7a701f708282e7f8686c7ed13bde5110.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.7a701f708282e7f8686c7ed13bde5110.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.7a701f708282e7f8686c7ed13bde5110.exe
-
Size
2.4MB
-
MD5
7a701f708282e7f8686c7ed13bde5110
-
SHA1
b41c59f39698564cb5eb5749bd75aa1ae6a29d1c
-
SHA256
a7246bd75ac4316fea62899e43aba1fa353f8ba8c4cd7600a85ff0e90b1e596f
-
SHA512
f8699c50612665baf8c331028140d1962168d8637b97d90fda81c39b7433fef2588bd14096e5b1e5f116765a61ad44b289ef1c7b38fe6d71cc0ba73f5bcec083
-
SSDEEP
49152:mbIdgNmaNVnZzIfBvGfeYcNencQ8dlcjS3MoN8GaGuNzBqA62naz5HeXDa:mBHGYfFweudlcEdGBqOazxeXDa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.7a701f708282e7f8686c7ed13bde5110.exe
Files
-
NEAS.7a701f708282e7f8686c7ed13bde5110.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: - Virtual size: 356KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 189KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pmj Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE