Static task
static1
Behavioral task
behavioral1
Sample
NEAS.a4d80f63aa05ce4e52c8c55b50891690.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.a4d80f63aa05ce4e52c8c55b50891690.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.a4d80f63aa05ce4e52c8c55b50891690.exe
-
Size
1.3MB
-
MD5
a4d80f63aa05ce4e52c8c55b50891690
-
SHA1
94d88d67331660979727a085ebd6eb27af8bc407
-
SHA256
f737765bdfa22a1acad8861546fa1886a35ff006fdd4d1a0bb467e02deff24e6
-
SHA512
7f5bda5762f0c8e380eb4cffcf6b90bbb0871fbfa6d0402de70196be3318598cbb62463d2971d2ff5effb5af03f7e44b187414558aaed61bb4f82a6b03007acf
-
SSDEEP
24576:ty8g6zYAikiG1+DGIezFA0XDMYomCF2whEMZhTDU021c0ArI0qjq4cLeiW:UA71+LezK0Qvm7GEMXDUx1EyjqQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.a4d80f63aa05ce4e52c8c55b50891690.exe
Files
-
NEAS.a4d80f63aa05ce4e52c8c55b50891690.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ