Static task
static1
Behavioral task
behavioral1
Sample
NEAS.a44d72a067eef87d70d7da0ff7b73870.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.a44d72a067eef87d70d7da0ff7b73870.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.a44d72a067eef87d70d7da0ff7b73870.exe
-
Size
70KB
-
MD5
a44d72a067eef87d70d7da0ff7b73870
-
SHA1
41477453231236a18d36412979c8f5a2432d9832
-
SHA256
15177a4ec11077e8c87be11e5e02225918fced9dcbc91ff050391e8edf4f148a
-
SHA512
4a0e91f59b1bedac57445af9b1ea1a27107c16c93e48342bd85d549a0e7cade04f751664d956f349fd79e2083ac436c273cb4fb75b3cad463d7d243626ea4a9c
-
SSDEEP
1536:0M/cPgzEuvbvhFNHK49ICynEGWbh8UH9SZ47Qn/2o9dIYrpLj:tZzEuvbv3Nq49ItnENH9SZ4u5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.a44d72a067eef87d70d7da0ff7b73870.exe
Files
-
NEAS.a44d72a067eef87d70d7da0ff7b73870.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 394B - Virtual size: 394B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ