Static task
static1
Behavioral task
behavioral1
Sample
NEAS.6a35680a24b038b51452de5d0b258510.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.6a35680a24b038b51452de5d0b258510.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.6a35680a24b038b51452de5d0b258510.exe
-
Size
14KB
-
MD5
6a35680a24b038b51452de5d0b258510
-
SHA1
7eb2243b75362cd8d35778cd9271ca6e3dc66d49
-
SHA256
227e63441c9a124f05f19ce8c79fef25f6a0ed20c033a553c96e53e4c9d36d64
-
SHA512
4418a680b65dc4b459f8ca3f8eb05338663796b74495b96ba309106389748a124b5338475fe2b5185cd6d43bec3bd8b2a3584fc835a2d792ca08e6db927a2637
-
SSDEEP
384:Ixq2lcBVhkaXeE/anlLfn9ARSOCeG4DE045H:IM2qrhVXeuanN9AkOJHA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.6a35680a24b038b51452de5d0b258510.exe
Files
-
NEAS.6a35680a24b038b51452de5d0b258510.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ