Static task
static1
Behavioral task
behavioral1
Sample
NEAS.86006f56c5277c1d7f4f2c7c2d0546d0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.86006f56c5277c1d7f4f2c7c2d0546d0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.86006f56c5277c1d7f4f2c7c2d0546d0.exe
-
Size
395KB
-
MD5
86006f56c5277c1d7f4f2c7c2d0546d0
-
SHA1
515c258951e22e8dcc456e013d3a7a159b060dfc
-
SHA256
958f8870b7c5b4f0e171801793cdef8fa42e41dd71e66cd47e68d07260fbc487
-
SHA512
a22c0b186b71e6d51bedbf4a6c1b6e0b3f1335222ee4a72a20a1d888e29bbf1535eccd88d53c182e7c7f4f6355bbe7fba68315a6a84259de4724c87af2fe269a
-
SSDEEP
6144:it03a62hzpSNxV2qcJVLNyTiY6wDyIJ2r/bl5hJ:Os52hzpHq8eTi30yIQrDl5hJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.86006f56c5277c1d7f4f2c7c2d0546d0.exe
Files
-
NEAS.86006f56c5277c1d7f4f2c7c2d0546d0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
packerBY Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bero^fr Size: 177KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE