Static task
static1
Behavioral task
behavioral1
Sample
NEAS.33d70707d77f92dd3bdd45d2fa8f1f70.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.33d70707d77f92dd3bdd45d2fa8f1f70.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.33d70707d77f92dd3bdd45d2fa8f1f70.exe
-
Size
651KB
-
MD5
33d70707d77f92dd3bdd45d2fa8f1f70
-
SHA1
744012b16c0b9e4f9fc3e1a3aabb9ae71be556ab
-
SHA256
fbf4f16c9e1191ad38ed73d0f6467af2a8fa41a5eecbbe5718a3a8eeb2208c81
-
SHA512
4b02c7685009cbdb1818305609e0a595afd8ee229a71218643dd5004673f7618f308fa083a3cf6e270b0e0d3f8e8af9570b5907c2b4a40462fdd13d351646a13
-
SSDEEP
12288:4B+5sjhoYIPC2k6ZHZHTh/gCHIBibaT3us2lZOWvjnhlgIzgs7N40AKj:xsIP66Z5Txg7BtT3F2rrVRzgkN2Kj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.33d70707d77f92dd3bdd45d2fa8f1f70.exe
Files
-
NEAS.33d70707d77f92dd3bdd45d2fa8f1f70.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
cKrwgWRk Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
QCYiaatN Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE