Static task
static1
Behavioral task
behavioral1
Sample
NEAS.96ecb84795a3586196c186ee5fabb170.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.96ecb84795a3586196c186ee5fabb170.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.96ecb84795a3586196c186ee5fabb170.exe
-
Size
604KB
-
MD5
96ecb84795a3586196c186ee5fabb170
-
SHA1
7271bb278eff489bbbb097a0094a0f785f924b84
-
SHA256
3e34e1242afc9212fcf017ed9d5b0029cc02d7c7b8e2df8e74c90920b53a2b86
-
SHA512
a854a68f83c349005b3f6a498a196df55819275b45388254fbc344f06e1b856279370935d8f4d896ac4c079a5db4188c12cd9ff4f0f5c9616d642e248c5e1d84
-
SSDEEP
6144:I3I7vxHY1MFlrUYNL6YOWrYVtLxQISzqJBpe:xD1k8lAYNWF8mHK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.96ecb84795a3586196c186ee5fabb170.exe
Files
-
NEAS.96ecb84795a3586196c186ee5fabb170.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 177KB - Virtual size: 588KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 24B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE