Static task
static1
Behavioral task
behavioral1
Sample
NEAS.680db5ef4efbbbe447f57abcd105c890.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.680db5ef4efbbbe447f57abcd105c890.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.680db5ef4efbbbe447f57abcd105c890.exe
-
Size
40KB
-
MD5
680db5ef4efbbbe447f57abcd105c890
-
SHA1
9ddc8a7cae4338c9c9ef087b2738f5bfe5c5f200
-
SHA256
c08983caffd584fafe6cfe61cb01dbf6961f25bfed30242700794818aa5e7fde
-
SHA512
b3ef7acc3d69e8f5f2d111837a01cd4cd0d8505d750819a287989b2bb040bb426d8bad4f9c3c22099c6e27d4e89d6c09872fdd895b6d22a2a755860278f73a5b
-
SSDEEP
384:8/yVPppppppppppppppIYtq/QDE045H0:v0SA6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.680db5ef4efbbbe447f57abcd105c890.exe
Files
-
NEAS.680db5ef4efbbbe447f57abcd105c890.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ