Static task
static1
Behavioral task
behavioral1
Sample
NEAS.4469b03e43911fed6f382727ccfa4a00.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.4469b03e43911fed6f382727ccfa4a00.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.4469b03e43911fed6f382727ccfa4a00.exe
-
Size
14KB
-
MD5
4469b03e43911fed6f382727ccfa4a00
-
SHA1
5072c5897fdf3df3f9a067dd61c0e4311451c7dc
-
SHA256
379613a2d0aec26003e45ab6831cca6bda03b13a3eaed44bfc6e6e8fc580082f
-
SHA512
67be2123308bb47ea5fa55e120428c56a32cbe2bece56be125a7e55f9a48fff7c30aee0e252f9334106ec613acb74afc372075811f5bdd57e4930745567691d7
-
SSDEEP
192:Amhi9ymiBT46WvBfLkkExxxxxxxxxxxxxxfxQryJsGNURGWyqDE045HQ:rhi9WBT4dJkkqxQryqGNUgKDE045H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.4469b03e43911fed6f382727ccfa4a00.exe
Files
-
NEAS.4469b03e43911fed6f382727ccfa4a00.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ