Static task
static1
Behavioral task
behavioral1
Sample
NEAS.144471f8b4084aa494e440b8180429e0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.144471f8b4084aa494e440b8180429e0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.144471f8b4084aa494e440b8180429e0.exe
-
Size
93KB
-
MD5
144471f8b4084aa494e440b8180429e0
-
SHA1
9f8a475fbc24b8d05c02305e9e0fbbc055c58b4b
-
SHA256
00a3748911feb921c9c9e6c094ea636dcefc6942f1a89ab8d3300ad92ade915f
-
SHA512
3c649f02ebf33954492cfa37dc8700b98c4fce19c019ec3f4d47b51f41d8d835dd566e625d6b77486e665caea1ab85cd585162d43c8de1e3b9f420367ae624b9
-
SSDEEP
1536:5orwjbOKrr44RLresdB/nml/di1rcZn7YipRfKziWzYIkiPtANQJAF444yI94MlY:5RjbOqFRdBB1rc/UhYTiPtAqJAgNcd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.144471f8b4084aa494e440b8180429e0.exe
Files
-
NEAS.144471f8b4084aa494e440b8180429e0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 332KB - Virtual size: 331KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ