Static task
static1
Behavioral task
behavioral1
Sample
NEAS.ff74bcc00a45d7c81dd600dfd8b0df70.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.ff74bcc00a45d7c81dd600dfd8b0df70.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.ff74bcc00a45d7c81dd600dfd8b0df70.exe
-
Size
6.1MB
-
MD5
ff74bcc00a45d7c81dd600dfd8b0df70
-
SHA1
e76054c6d6ec48f6625cbfbe00718cde23076d37
-
SHA256
1b384d2587229e6d1f8aa0d67b3219fc3d81f42a22bc466b6c513f20ffb23e12
-
SHA512
820780ee90c811c596ef2f97ed5326b6bc95a3e4fa5c4d4b9b6bcf0d93c28fad9338ffefc3fdff901ffc804c8b504e305bff7ceb97e55033630a345efad9a40d
-
SSDEEP
49152:TKn0Y+Hka8Fw+ZV2gN0m3vCFLLCVImBOg9M:20hka8Fw+1oLLSI4Og9M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.ff74bcc00a45d7c81dd600dfd8b0df70.exe
Files
-
NEAS.ff74bcc00a45d7c81dd600dfd8b0df70.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 1.3MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��8�ƕ�� Size: 1284.1MB - Virtual size: 48.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
blpxvbby Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fnafvtle Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE