Static task
static1
Behavioral task
behavioral1
Sample
NEAS.6888fef76da715e5982ffc3f1124bcf0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.6888fef76da715e5982ffc3f1124bcf0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.6888fef76da715e5982ffc3f1124bcf0.exe
-
Size
363KB
-
MD5
6888fef76da715e5982ffc3f1124bcf0
-
SHA1
0b13b426bcb7db2c03a0282f60557305f2d3b18d
-
SHA256
6aa099f16947d7f81f780d745c429d43125a59b6d2a8aab73ff30df09ca257e6
-
SHA512
c667bd2b920617780a903ec94e87c54f0963a6a30d90b51d3113fc7f1d3cd344c3b3bee3e900c4e9f20a2679132cdd52c38d1b4ee5b0ee7d1206db5b70a0776e
-
SSDEEP
6144:AtVM6MaLRQbk9HPg1VApdfftzVrbrxwIUoQBtwJbTRpiJ2/s5N5lb99n41GFg5q0:AM6MeRXhgEPf5VrbSIEwJbTXSD5DFbnR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.6888fef76da715e5982ffc3f1124bcf0.exe
Files
-
NEAS.6888fef76da715e5982ffc3f1124bcf0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.PDX Size: - Virtual size: 520KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PDX Size: 360KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wtq Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE