Static task
static1
Behavioral task
behavioral1
Sample
NEAS.b7894b8d78824dc11254445ff83a8690.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.b7894b8d78824dc11254445ff83a8690.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.b7894b8d78824dc11254445ff83a8690.exe
-
Size
380KB
-
MD5
b7894b8d78824dc11254445ff83a8690
-
SHA1
a32a15ee8ea11be81e8e5a7ea84bc2723d877852
-
SHA256
77fbf8477354bba7a609b7821b7a4d4308b7e540eabe53935a103959c5da6100
-
SHA512
50e943efe94988d807fe252d26da520c69ad1b262b371c4d12508d0355ae24150c7c23cc15601a7bdfa9576dc9b22a13113adf7eb172ca605bb695b838eb8d9d
-
SSDEEP
6144:/rTfUHeeSKOS9ccFKk3Y9t9YZzynNauaH1K4DRMH:/n8yN0Mr8ZzynNauaH44D6H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b7894b8d78824dc11254445ff83a8690.exe
Files
-
NEAS.b7894b8d78824dc11254445ff83a8690.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
FKP0 Size: - Virtual size: 18.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FKP1 Size: 203KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE