Static task
static1
Behavioral task
behavioral1
Sample
NEAS.4cf9f064b527c99b5510f94535273a40.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.4cf9f064b527c99b5510f94535273a40.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.4cf9f064b527c99b5510f94535273a40.exe
-
Size
951KB
-
MD5
4cf9f064b527c99b5510f94535273a40
-
SHA1
d317bfe641d711b3367bcee97776beeda77d5dcf
-
SHA256
3cd9dbe5d8b9a4b321dc88c69d9e59f1d0e0db987df689afd4e14929eaa149db
-
SHA512
1772bc607ce6c76f3b629666fd5436634bb2865134c8d6a0d590b81020a8c55168399bd47ba5552c9564c604375009a39de62daa98197745ae9ba8aeea5fee75
-
SSDEEP
12288:zJF2Tx0P2uymYNWdQ90N0vR0bSnQjG8dfY7QCzotVUNiXQLrIqXc/AMg4FbfmDPZ:zzqxG2Z9mIhQvqLzoPXVMc/ZbEPZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.4cf9f064b527c99b5510f94535273a40.exe
Files
-
NEAS.4cf9f064b527c99b5510f94535273a40.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ