Static task
static1
Behavioral task
behavioral1
Sample
NEAS.f6778fbe4f9c578135a5ad03ae471c90.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.f6778fbe4f9c578135a5ad03ae471c90.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.f6778fbe4f9c578135a5ad03ae471c90.exe
-
Size
336KB
-
MD5
f6778fbe4f9c578135a5ad03ae471c90
-
SHA1
e4b429b2bf462c0da9b650377a57c7623f6a013f
-
SHA256
4236f226521a87d6eb4d90a0604499177967f465bb29f1378fadd3f24c901f03
-
SHA512
4b18f262ec2e3206307a088581e0b6adaa188ee7c00a6e38052ba51bf103bb6ad8bd9e8eecdbcba20e62737a56d5e9b1d45082ddfea1b93b463016b6590952e6
-
SSDEEP
6144:rqppuGRYx4H712f/SBTpzZA6rXD40b+7TJ21WQe:rqpNtb1YIp9AI4F21WQe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.f6778fbe4f9c578135a5ad03ae471c90.exe
Files
-
NEAS.f6778fbe4f9c578135a5ad03ae471c90.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
NDltoTPW Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tJrdyPER Size: 177KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE