Static task
static1
Behavioral task
behavioral1
Sample
NEAS.606013c99b098f167dd700db3f6af240.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.606013c99b098f167dd700db3f6af240.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.606013c99b098f167dd700db3f6af240.exe
-
Size
448KB
-
MD5
606013c99b098f167dd700db3f6af240
-
SHA1
8e13b02018572904bb07199f833fa997c48715f9
-
SHA256
d14d44bdf4f45cf0d764d52b94b47c988c3dd84f90f1d26a2d7ac77556a9caac
-
SHA512
e8f6feda70c1a4395d1881fe46161d69689642896a6e4c5cc1f2f18d999b823045639f9da134ec05a461880accbd0fd330a1d391a3951b21b8ac290aea80a61e
-
SSDEEP
6144:6zZroAv2ftN7iNTguGKqp6qdA/WE9+/6ixUj4ZqcaekUu7gV+9ArJjNPw:6zNoG2j7iNGTp6qdiWX9967gEetK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.606013c99b098f167dd700db3f6af240.exe
Files
-
NEAS.606013c99b098f167dd700db3f6af240.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 444KB - Virtual size: 441KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ