Static task
static1
Behavioral task
behavioral1
Sample
NEAS.f416c3259284eeb06c4672fbfd307080.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.f416c3259284eeb06c4672fbfd307080.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.f416c3259284eeb06c4672fbfd307080.exe
-
Size
422KB
-
MD5
f416c3259284eeb06c4672fbfd307080
-
SHA1
613208062e206c56719291cf96e0edfbab3abf96
-
SHA256
03bef45b17e9e895365797c791358ecaea87579a290efde8445b753eb6feebc9
-
SHA512
ecebb8b322d988a51935d17e7a572141e8458896218cc91013238bcaa0b01945b97839e73da6b20e9b138e09fc5124d9e54082e6423d416602c20824f41d9638
-
SSDEEP
6144:NWxlKgzelZNQSBQGH/CSpWqT5Ns6+X7jINs6+X7j:NdfBQGH6Sfk6+X/l6+X/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.f416c3259284eeb06c4672fbfd307080.exe
Files
-
NEAS.f416c3259284eeb06c4672fbfd307080.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 236KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE