Static task
static1
Behavioral task
behavioral1
Sample
NEAS.866d0127276929b272d921c28eabff20.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.866d0127276929b272d921c28eabff20.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.866d0127276929b272d921c28eabff20.exe
-
Size
14KB
-
MD5
866d0127276929b272d921c28eabff20
-
SHA1
d12b8fb6e1544162a4735a9e67d6902a9c56b057
-
SHA256
0768a2d73a7b48d93128559d08d51ec5be9c35e850252331ee9fbf90bf15eeb0
-
SHA512
e16e8ac64f188f5c1b8adb980c06ff73ff2da7f0868a62f3a3b0eb4165144b3520efce5e13bce43bfc150893ffdcf61c693adbb5c05db9d6dd89268b0901ebc5
-
SSDEEP
192:Bv0HD3ItTvaV8D16GdL916fTgKl32LF4cusy4p5PusqDE045HQMzzzz:CHDI28Dx8TX3EF45c4LDE045H9zzzz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.866d0127276929b272d921c28eabff20.exe
Files
-
NEAS.866d0127276929b272d921c28eabff20.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ