Static task
static1
Behavioral task
behavioral1
Sample
NEAS.89a8f491c9b88261bea853a8cf639500.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.89a8f491c9b88261bea853a8cf639500.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.89a8f491c9b88261bea853a8cf639500.exe
-
Size
250KB
-
MD5
89a8f491c9b88261bea853a8cf639500
-
SHA1
0819e27644350273449766063e2d4f1fe28b2c51
-
SHA256
fd70f26b63874c8f6b1893a82d8b50edce9238886b888a20a29baa51788edc55
-
SHA512
6c10eed32c34eb549b2c1daaf15c87934703b49741dafced4e70dd778b5c106dd328cf319fe46507679be152458aec3734831c2e024972ce79b7d4500cd66e4d
-
SSDEEP
6144:Ua1G8FVA6adURUvqdo1NGKXmhYvWVQMBCXaFhWzAJX:jFG6adUicu8Ykv2aFhUO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.89a8f491c9b88261bea853a8cf639500.exe
Files
-
NEAS.89a8f491c9b88261bea853a8cf639500.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 139KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ