Static task
static1
Behavioral task
behavioral1
Sample
NEAS.9c901bea14e701602773f2ae2b12a5f0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.9c901bea14e701602773f2ae2b12a5f0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.9c901bea14e701602773f2ae2b12a5f0.exe
-
Size
547KB
-
MD5
9c901bea14e701602773f2ae2b12a5f0
-
SHA1
9e0200e09d26370ea92bb3507d51a6edfaef7d50
-
SHA256
9863e3acc8b596b19498aa73a33012b259d555d1df02b97a24482dd0d861f271
-
SHA512
20269fabf50b46f09c7f2ffd2f9f1112b1f6cd029afc57c3ea67c28c9b7ab47a2210d3c536b9c3da55cd550c3a08bd1adb67935522723526bf6e15f450594497
-
SSDEEP
3072:8CaoAs101bol0xPTM7mRCAdJSSxPUkl3V4Vh1ZMQTCk/dN92sdNhavtrVdewnAxj:8qDAMl0xPTMiR9JSSxPUKuzdodH1ml
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.9c901bea14e701602773f2ae2b12a5f0.exe
Files
-
NEAS.9c901bea14e701602773f2ae2b12a5f0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
1614346 Size: 513KB - Virtual size: 564KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9536397 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4900659 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE