Static task
static1
Behavioral task
behavioral1
Sample
NEAS.658a5e6950b1e851b7af5878a7518990.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.658a5e6950b1e851b7af5878a7518990.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.658a5e6950b1e851b7af5878a7518990.exe
-
Size
32KB
-
MD5
658a5e6950b1e851b7af5878a7518990
-
SHA1
c443f832d06d37e708955471dce442801cd1c394
-
SHA256
3372b3bbab9c39a16538ca876f37e62906d39089602746aceeab366e6272f391
-
SHA512
0c37dcd3fe24415358776809234e523965249110a9b186ef0ce40ec265b5f8dc3995db4bff98d2399ec86ec29b03ea36604d6c67b5dd12f47c8fdeb753c54f1b
-
SSDEEP
3:/ll5HllHllvg/8Lzt/lau8ttll8msv3k//vl7//llrll9h/nk9l1t1l9tllFllG+:/RHIg+zcps6H0me/6OVtuWn0/U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.658a5e6950b1e851b7af5878a7518990.exe
Files
-
NEAS.658a5e6950b1e851b7af5878a7518990.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
telok0 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
telok1 Size: 31KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE