Static task
static1
Behavioral task
behavioral1
Sample
NEAS.4b10ce80e77ea629b5da2b36f9b05700.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.4b10ce80e77ea629b5da2b36f9b05700.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.4b10ce80e77ea629b5da2b36f9b05700.exe
-
Size
741KB
-
MD5
4b10ce80e77ea629b5da2b36f9b05700
-
SHA1
4aa729ce5df2cf25adc332f0cc0b58fe49ba428f
-
SHA256
948d2f520fd7766e48e0fc2f192686b1c5a6ee58dae3f9c311338e5549c56779
-
SHA512
656ffd2f5f3fd975d1d640a429fafd289fc801ac677c4733fc35b7c9e95c61f91cf415b032e85f4b6e44f93056796f80fcb8804ac7719ea7baf9efe3607be3a0
-
SSDEEP
768:ze6WyOqGi+a22SuKSmCe6WyOqGi+a2uSuKGi+mCeWyO6WyOq+YXqZRgH4UQ1tmqJ:QXqZRgH9Q1tVozk6JVeFWanM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.4b10ce80e77ea629b5da2b36f9b05700.exe
Files
-
NEAS.4b10ce80e77ea629b5da2b36f9b05700.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 644KB - Virtual size: 644KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 7KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 35B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE