Static task
static1
Behavioral task
behavioral1
Sample
NEAS.517a120013fbe25e5c1650816be768d0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.517a120013fbe25e5c1650816be768d0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.517a120013fbe25e5c1650816be768d0.exe
-
Size
57KB
-
MD5
517a120013fbe25e5c1650816be768d0
-
SHA1
c8f88e56a371e8c0763c85f16172b034410c43ee
-
SHA256
342cf2a81b62df31f015b4e951b7f1e147f2817fff4df8faca22c4012cd0acb3
-
SHA512
4e7048612c708ac952012ed2ae7ae1711948ff1bab1e071a2d9323aef94ace17b487fba1ed61b1efde7c4c26245112ab11b6cbe0904ccd3a5b82ea3f7dd14f41
-
SSDEEP
768:l7Xezc/T6Zp14hyYtoVxYPLVNPsED3VK2+ZtyOjgO4r9vFAg2rqm:V6zqhyYtkY7YTjipvF2r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource NEAS.517a120013fbe25e5c1650816be768d0.exe
Files
-
NEAS.517a120013fbe25e5c1650816be768d0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ