Static task
static1
Behavioral task
behavioral1
Sample
NEAS.8879583861e3abddc15c7147d1c4fb20.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.8879583861e3abddc15c7147d1c4fb20.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.8879583861e3abddc15c7147d1c4fb20.exe
-
Size
2.0MB
-
MD5
8879583861e3abddc15c7147d1c4fb20
-
SHA1
cdd928ff9287c6e0e08802e507ee3cef1022116a
-
SHA256
978ff2dae690838f61fe0c7ac915d0d02bed395507fde553604660a74f22c208
-
SHA512
4f23f48140cded6d10c0b4bfb402458ea150f795a5007eb4d3ffbc72b75430b892eb93f6843d808ca5ad549e656da61853a5aa6c4f851c86110688df5b573b6b
-
SSDEEP
6144:RH602iaFtTBeoP44osBbR2NS/GKe0wxQHvmp86JQPDHDdx/Qtqx:Ile+los9R3GKe0mwepPJQPDHvd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.8879583861e3abddc15c7147d1c4fb20.exe
Files
-
NEAS.8879583861e3abddc15c7147d1c4fb20.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 192KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 152KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE