Static task
static1
Behavioral task
behavioral1
Sample
NEAS.4d9896177e5f7da4176d61fffd3e76e0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.4d9896177e5f7da4176d61fffd3e76e0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.4d9896177e5f7da4176d61fffd3e76e0.exe
-
Size
228KB
-
MD5
4d9896177e5f7da4176d61fffd3e76e0
-
SHA1
9c17ed9a9d9c8a28d8c3f65df1278860969cffc1
-
SHA256
68aa8c9e32dbe533bda595cc7e23ff7993be86bd3c511447f30c5cdbf194e539
-
SHA512
0638c6210e9bcc33fc99e23d8936af88db3c85dd2bcc482065b72aba8c562c520f92e6cbe263cecf7d93fe61824e16896e66534478d2bd544877684b3daff4a5
-
SSDEEP
6144:W1qqDLJA0j64lJFFKZKPuDOax0RS6B2oGBD5j5Vz7SL:W4qnJA0j6SPuRx0RA1DVvSL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.4d9896177e5f7da4176d61fffd3e76e0.exe
Files
-
NEAS.4d9896177e5f7da4176d61fffd3e76e0.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ