Static task
static1
Behavioral task
behavioral1
Sample
NEAS.638fc14f4ba38370d522faf713a193d0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.638fc14f4ba38370d522faf713a193d0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.638fc14f4ba38370d522faf713a193d0.exe
-
Size
88KB
-
MD5
638fc14f4ba38370d522faf713a193d0
-
SHA1
f34802f9ece18eac2d280a36ca5117ec58904017
-
SHA256
4bb2a88845467d3f47e67f2b8ad667f5708440bcc6f45555a5f8fa2f44038445
-
SHA512
8a9a700033618063b6c8b82dbdbd2b4dc53de49b8429ca595dec7d9331818c968a4e47e86fe302952bb4749ee9e9fd9432febd8e0827f3a0e7e4aba66fd60af1
-
SSDEEP
1536:gGaq93mQy5PV4MSu4M3vfAlA89mWMMF4pzYU2qIUZ6kd+l/:g5MaVVnLA0WLM0Uvh6kd+l/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.638fc14f4ba38370d522faf713a193d0.exe
Files
-
NEAS.638fc14f4ba38370d522faf713a193d0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 80KB - Virtual size: 564KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 776B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ