Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d6a7618c30295dab888e34acc86f1dd0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.d6a7618c30295dab888e34acc86f1dd0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.d6a7618c30295dab888e34acc86f1dd0.exe
-
Size
58KB
-
MD5
d6a7618c30295dab888e34acc86f1dd0
-
SHA1
c58d78e173ad0314938094813d28ffb586da57f9
-
SHA256
3c5d852ec288e5d3e9dc6d354ccd6ae60c1fe547fe8e4491d49a41690f06998d
-
SHA512
fef8128a6215ff9bfd12c3396cb30f08cf89f1fa4b9b26c373fd385a99eb868ca7b5c0278511b5470ed8c33e7c367476fb7282290478aeaf59d43de84e6e2031
-
SSDEEP
1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb7tAd:ymb3NkkiQ3mdBjFIyd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d6a7618c30295dab888e34acc86f1dd0.exe
Files
-
NEAS.d6a7618c30295dab888e34acc86f1dd0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 274B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ