Static task
static1
Behavioral task
behavioral1
Sample
NEAS.f641f0a3920b583238dbafb10cb253d0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.f641f0a3920b583238dbafb10cb253d0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.f641f0a3920b583238dbafb10cb253d0.exe
-
Size
8.0MB
-
MD5
f641f0a3920b583238dbafb10cb253d0
-
SHA1
f512d51ee1d5a936a5091816bd330691f802d559
-
SHA256
75b060f9f4e3e0c396b8d273e15ac244cf1213469f546bb5d59e4d4b423efe01
-
SHA512
b58ae5be61fc0e29fae5ffa303b4c039027bd4662701da12220ccbdd3657e298442206fef66b14e7f8f73f7ad14b347416cf2b1fa34dcfb4caf9c5f3b3d4a114
-
SSDEEP
196608:Mom7Nm7om7hm7om7Nm7om7Nm7om7Nm7om7Nm7om7Nm7om7Om7om7Nm7om7Nm7omz:x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.f641f0a3920b583238dbafb10cb253d0.exe
Files
-
NEAS.f641f0a3920b583238dbafb10cb253d0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 104KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ