Static task
static1
Behavioral task
behavioral1
Sample
NEAS.a968718a3d26dd132ca17bf69562b4d0.exe
Resource
win7-20230831-en
General
-
Target
NEAS.a968718a3d26dd132ca17bf69562b4d0.exe
-
Size
345KB
-
MD5
a968718a3d26dd132ca17bf69562b4d0
-
SHA1
908907bffecc4788b0911b0e27bdc5f83baa58da
-
SHA256
ce3cbe5ce3193e2a9ace4a1f1c6886146e1fa77e284ea8f68c0085106a3bb773
-
SHA512
f359179253b00eb56a2ca9b87074cb27d75c7d15369b82ab5403d868877033c81176cc2adde6287f5eb2a342f01b10a5474484cfa0ac1d81b8eda2df9b07ab8b
-
SSDEEP
6144:9cm7ImGddXvJuzyy/SfVFKpU/sien7NuOpo0HmtDKe0wKyKqiOfm8RCfDK4TrA:/7TcBuGy/Sa+/sie0OpncKe/KFBOfmzI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.a968718a3d26dd132ca17bf69562b4d0.exe
Files
-
NEAS.a968718a3d26dd132ca17bf69562b4d0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.didat Size: 40KB - Virtual size: 152KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ