Static task
static1
Behavioral task
behavioral1
Sample
NEAS.706dd1305365211ef6e59b3f9d3bdf80.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.706dd1305365211ef6e59b3f9d3bdf80.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.706dd1305365211ef6e59b3f9d3bdf80.exe
-
Size
117KB
-
MD5
706dd1305365211ef6e59b3f9d3bdf80
-
SHA1
e4e4249aa6a0ebda9eee51ded14f32403bd0b6ad
-
SHA256
cc1623a8e0462fc456fe84eb20d410f52b69296b1a7f879a1bc8402fc6988be0
-
SHA512
5038dd71149ff7e3633f3eb2e38b93b7e4bf7dd42def3ac5601173d1cbbd95b4b465cec1f762d44618f07e7e0bd7526fa70abb8c444960b39d7654337cd60f51
-
SSDEEP
3072:OE9j8b3ZXgKC1hX//iASOXRJzDOD26j/3Dc6an:OEebiKuX//iZOXRJ3OD26jxg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.706dd1305365211ef6e59b3f9d3bdf80.exe
Files
-
NEAS.706dd1305365211ef6e59b3f9d3bdf80.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ