Static task
static1
Behavioral task
behavioral1
Sample
NEAS.6dfd464443bbb7d1c7a80371ec71b6f0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.6dfd464443bbb7d1c7a80371ec71b6f0.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.6dfd464443bbb7d1c7a80371ec71b6f0.exe
-
Size
14KB
-
MD5
6dfd464443bbb7d1c7a80371ec71b6f0
-
SHA1
dc94c818f39459c6e5d5c5c1016b08e126c09d43
-
SHA256
538a8c3587dd9f0e641722d88352bf6af1fcff422dda474d968f49ad2f3557f7
-
SHA512
7c116f38a6e86a9fa65876b941fc6bcc8de717187687e728e54209420dab70a81774d9237b505a691eaed30e0945a423ed06aa64aa852b0e612902caa59be53e
-
SSDEEP
192:KumY3cymZL/vS7laTvh7vJk4V894in7d72p6qN3gKDBynzC6ov8AXAYGqDE045Hf:9cXZL/v0l8vruN2gqBn8SkmxDE045H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.6dfd464443bbb7d1c7a80371ec71b6f0.exe
Files
-
NEAS.6dfd464443bbb7d1c7a80371ec71b6f0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ