Static task
static1
Behavioral task
behavioral1
Sample
NEAS.00ab748a57aa4b8c183d2f660e3e5690.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.00ab748a57aa4b8c183d2f660e3e5690.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.00ab748a57aa4b8c183d2f660e3e5690.exe
-
Size
40KB
-
MD5
00ab748a57aa4b8c183d2f660e3e5690
-
SHA1
5aab3d4a5fe6e616d0010d20eacb8f534a41f525
-
SHA256
ffa6ea4e839c2e627a2abf8d166d5138ee0f9ccf7c2283198d57f4632f434dca
-
SHA512
d4af865e7669338aae105c433f3644db2871be5c0ac341d6caa6aade616adc97c71e13265e4d36958495a7f5abb75e9a835db03710884ca4f5d4ae591049604d
-
SSDEEP
768:qFuFOGGofW+ZIneKpO+DsqUj9a3UiRWumzw/GCIIwbms:qgWofZKGDms
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.00ab748a57aa4b8c183d2f660e3e5690.exe
Files
-
NEAS.00ab748a57aa4b8c183d2f660e3e5690.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE