Static task
static1
Behavioral task
behavioral1
Sample
NEAS.5cf167dc837c1181f58f7fd2f6355f10.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.5cf167dc837c1181f58f7fd2f6355f10.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.5cf167dc837c1181f58f7fd2f6355f10.exe
-
Size
242KB
-
MD5
5cf167dc837c1181f58f7fd2f6355f10
-
SHA1
8b2bee0e7df568f5c890462f3569f621a66126d2
-
SHA256
4545187d2c82f0b1342c2f48938beab10171fee53c4f11356be07016f6df4b05
-
SHA512
db650e85c2c0bd08eccf57115f2c4c013b86c5d7e47f6bb562739e8c41109656125b8b620f85046d04fbccc2921b3aab321a5ec61a6a49bd01db23869c57c665
-
SSDEEP
6144:h3dvlreVvbxNFzzrzKCGYdXvPhdMHOitK8d60qjAWrtAu22nxGl:hRabxNFffKqXvZGRT6ZjAWBf2aG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.5cf167dc837c1181f58f7fd2f6355f10.exe
Files
-
NEAS.5cf167dc837c1181f58f7fd2f6355f10.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
nsp0 Size: - Virtual size: 760KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 241KB - Virtual size: 245KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE