Static task
static1
Behavioral task
behavioral1
Sample
NEAS.a9439ccd20ae34746ff06b72d2db1c80.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.a9439ccd20ae34746ff06b72d2db1c80.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.a9439ccd20ae34746ff06b72d2db1c80.exe
-
Size
279KB
-
MD5
a9439ccd20ae34746ff06b72d2db1c80
-
SHA1
49f75236a463b1a4a560e192927c0d474c90a084
-
SHA256
92b3ad2bfa41cbb84b2bccabb0bf418237ba40abbf4865e6b609ac500d4e918e
-
SHA512
e36409b303db97197b8de41740f8252bca2b8ee550f8933368837a56ee978e22aed07d351c3a7b2a2a558bd89d51d8df4f883b2c98e71ac938f5bfc019109a9d
-
SSDEEP
6144:rqppuGRYx4H712f/SBTpzZA6rXD40b+7TJzcV:rqpNtb1YIp9AI4FzY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.a9439ccd20ae34746ff06b72d2db1c80.exe
Files
-
NEAS.a9439ccd20ae34746ff06b72d2db1c80.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
NDltoTPW Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tJrdyPER Size: 177KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE