Static task
static1
Behavioral task
behavioral1
Sample
NEAS.6f484cffd1cb6a8c276b1c738eea6400.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.6f484cffd1cb6a8c276b1c738eea6400.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.6f484cffd1cb6a8c276b1c738eea6400.exe
-
Size
14KB
-
MD5
6f484cffd1cb6a8c276b1c738eea6400
-
SHA1
d2c6a6516eb75aa4b5625021ce255020baa4d658
-
SHA256
c482ccf396e17d09a97b3e03eb55f32bbca27dc6e15650a4083be097dbca04ab
-
SHA512
4ed8bc707de080a2e41f8a17251771d5b390b993c46c48807362559e69377276de43b80d95a9cac56620fdffc0015c0813809333a853bfc8dc376edce0a32a53
-
SSDEEP
384:tUSHTV9ck7nXc7nHnPYb2wpcnWe1pqDE045H:9z/78HPYb2/Wy6A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.6f484cffd1cb6a8c276b1c738eea6400.exe
Files
-
NEAS.6f484cffd1cb6a8c276b1c738eea6400.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ