Static task
static1
Behavioral task
behavioral1
Sample
NEAS.5596a61957997818c6e32a29cfa3a850.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.5596a61957997818c6e32a29cfa3a850.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.5596a61957997818c6e32a29cfa3a850.exe
-
Size
4.4MB
-
MD5
5596a61957997818c6e32a29cfa3a850
-
SHA1
6312a80360fe11b8211cac72c8170dc235db4ee0
-
SHA256
7f52e2c21f9665ca5057c885bc3c104537cdd87c918b4d037f91006821c65319
-
SHA512
e79cb04525788ae0766df2f9add4dda3176f177d9c5ea519be18bbc8aabb66dbd9c5f5a8604520a07e1271ac2cf494064c4a9a10692be3aa57f8871f55124c02
-
SSDEEP
3072:E6fV9gIzGIS0hb+qcbG9kSBYO5CcW8jMG+MEICI:E6fVVGR0hbfcbuXYO5Cc6MEHI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.5596a61957997818c6e32a29cfa3a850.exe
Files
-
NEAS.5596a61957997818c6e32a29cfa3a850.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE