Static task
static1
Behavioral task
behavioral1
Sample
NEAS.6fb37d5a4fcc052cd809e6573ce59d80.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.6fb37d5a4fcc052cd809e6573ce59d80.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.6fb37d5a4fcc052cd809e6573ce59d80.exe
-
Size
40KB
-
MD5
6fb37d5a4fcc052cd809e6573ce59d80
-
SHA1
97431c687cebd96d424e881735dd388bb02f3462
-
SHA256
d01a850c12edc5d7cb63cbfc099c5c984debe0e3c97bbe6dcea1b1ef64637069
-
SHA512
269c7f3e81e3f69ced60c9a8f3ec0162c6d473bb35fe038b20cb9040e10ac8b01b94e1604d7dc886fb6e5652cdf1d5b86bc886150699c35b210f4d5097283886
-
SSDEEP
96:L+/szBvrwUa4hyuNN6trFPpdpNnJAKvwXd9XhhUmtOLC:so6ihrf+nJmnhH42
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.6fb37d5a4fcc052cd809e6573ce59d80.exe
Files
-
NEAS.6fb37d5a4fcc052cd809e6573ce59d80.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 596B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ