Static task
static1
Behavioral task
behavioral1
Sample
NEAS.4e8cd664da051c683c54fca11dbf9670.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.4e8cd664da051c683c54fca11dbf9670.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.4e8cd664da051c683c54fca11dbf9670.exe
-
Size
120KB
-
MD5
4e8cd664da051c683c54fca11dbf9670
-
SHA1
5867176771f5d52098eb042d09360b5a77d03547
-
SHA256
a81efa8142d19388e9db48341effbbb3b63d4443fce6ee0b08a5b56a97b8e8e5
-
SHA512
9e8e44788667895c6a7ba0d7de4ac4e5d9b3728986641947723cedb5da681f033d5da160a752da7d38762582adbc103252777cd890cfb6cbd0b1eb2b6915a0b2
-
SSDEEP
3072:2SNChBNpSjDp+UidGSXiFhzQZV5VaNLv9DWP:2neDcgRQv5VaNT9DWP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.4e8cd664da051c683c54fca11dbf9670.exe
Files
-
NEAS.4e8cd664da051c683c54fca11dbf9670.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 218KB - Virtual size: 218KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 67KB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kic Size: 512B - Virtual size: 5B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ