Static task
static1
Behavioral task
behavioral1
Sample
NEAS.f239edf58bbe610526e8460075e11700.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.f239edf58bbe610526e8460075e11700.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.f239edf58bbe610526e8460075e11700.exe
-
Size
14KB
-
MD5
f239edf58bbe610526e8460075e11700
-
SHA1
8d29e428087df532d781adb611b62fa8663fc38a
-
SHA256
721bc90b45ef9da5df5e102278f261688302c5a9934429e8f5c275eb1106fd53
-
SHA512
1e087b75f64dcdc51fec6221a4e15a6d1fe05cb0d40d97119fdb1952d0d66ef0dc58ecfaa6aa33397a36e678cceb134ca03e05f9a9f03f470f7bbe3d18da5818
-
SSDEEP
384:cyPV0CHOlSPV5sL/LwffuX0DE045H+aaaa:cZymcKOA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.f239edf58bbe610526e8460075e11700.exe
Files
-
NEAS.f239edf58bbe610526e8460075e11700.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ