Static task
static1
Behavioral task
behavioral1
Sample
NEAS.4be015d98c3c8dec9eab81ffb4814fe0.exe
Resource
win7-20230831-en
General
-
Target
NEAS.4be015d98c3c8dec9eab81ffb4814fe0.exe
-
Size
347KB
-
MD5
4be015d98c3c8dec9eab81ffb4814fe0
-
SHA1
b69bbcff106cfcb51d89d05e0aa1ba496bc4de27
-
SHA256
c9e83ff948b6da117d2747e040a76d42fc856f72b23076897d69259227842290
-
SHA512
bfb759d38b7168391214411207ae45ab7b337a3cf87729bd82916513fd7bf9ba854f0bde97bf8a37ed353a97c926e7d2716c8122089a92d01e5462284a7a7fb1
-
SSDEEP
6144:9cm7ImGddXvJuzyy/SfVFKpU/sien7NuOpo0HmtDKe0wKyKqiOfm8RCfDK4Tr3:/7TcBuGy/Sa+/sie0OpncKe/KFBOfmz/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.4be015d98c3c8dec9eab81ffb4814fe0.exe
Files
-
NEAS.4be015d98c3c8dec9eab81ffb4814fe0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.didat Size: 40KB - Virtual size: 152KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ