Static task
static1
Behavioral task
behavioral1
Sample
NEAS.a0b606f1ffa009452006f3d68eb6bda0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.a0b606f1ffa009452006f3d68eb6bda0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.a0b606f1ffa009452006f3d68eb6bda0.exe
-
Size
84KB
-
MD5
a0b606f1ffa009452006f3d68eb6bda0
-
SHA1
2b492a9a6202ac10bbc7ce254835fbb2f1e21a44
-
SHA256
c6bf4d5820237c1932dee62c3338014c2923a3b0402b8c8885e8b4b471ce9165
-
SHA512
88525d1d6caba05804f63b788b7820483ac28d4bae553b547e99b406fc69e99f5302224c31cdd739ccf8d660399041a56f2ec9bf602b8597a456c1be53aeaf06
-
SSDEEP
1536:/BfzNxY46YO7KiOzXUC/iOXHKA4Ym+Hp1tm60G6Y:/BJh6VLIX71tnjAdNY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.a0b606f1ffa009452006f3d68eb6bda0.exe
Files
-
NEAS.a0b606f1ffa009452006f3d68eb6bda0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
kjogz0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kjogz1 Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kjogz2 Size: 527B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE