Static task
static1
Behavioral task
behavioral1
Sample
NEAS.a44e2785f32918149a7c7ed4771f13e0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.a44e2785f32918149a7c7ed4771f13e0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.a44e2785f32918149a7c7ed4771f13e0.exe
-
Size
8KB
-
MD5
a44e2785f32918149a7c7ed4771f13e0
-
SHA1
a61331d347952f267f2459668d511861b8b064f1
-
SHA256
fa0a48cdcb27feb81e0b7c41b8a48cf4f5ac89226c86f012add76d451bc7c82d
-
SHA512
2ef502cfb7f0738fa68b045253c94b455aa60dd6bb3dfce4d6b5a447ee88eefd89b9e687dda3cfcd03cde5a2e6a63c22fabdb3b064f8e219f293d4890e995e17
-
SSDEEP
96:TJZCE1VwLwhlvmtgvdtoTMSeoYNsfvwF46wTCZtNTTdsGn:vPQumtL+Z4AZv2Gn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.a44e2785f32918149a7c7ed4771f13e0.exe
Files
-
NEAS.a44e2785f32918149a7c7ed4771f13e0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 840KB - Virtual size: 839KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 365KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ