Static task
static1
Behavioral task
behavioral1
Sample
NEAS.7972e939156d46e9e0b5eaabb9dfa280.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.7972e939156d46e9e0b5eaabb9dfa280.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.7972e939156d46e9e0b5eaabb9dfa280.exe
-
Size
2.5MB
-
MD5
7972e939156d46e9e0b5eaabb9dfa280
-
SHA1
e567b0e238b1d249184d24c75e9f87c925c14f22
-
SHA256
c6248e9e0f67c68ca27effd1695d85f87a00084692fb6545f4f7fb6d22e145b2
-
SHA512
e7590c254403d7fb35f643369a0101470c1f62f5bbe60404b43eb34f9b9b1297f64d17af558eeb8aac55d2acfbcf414b90d67fcbc1fef8a4b1de6d99b96ff52a
-
SSDEEP
49152:sIPwZg9ShVa2xVy0DQQ6BsgkKmX+GqbjcF3dtaSCrL5:7wZG2Vy0Z6ygPmX+GX3dYr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.7972e939156d46e9e0b5eaabb9dfa280.exe
Files
-
NEAS.7972e939156d46e9e0b5eaabb9dfa280.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 244KB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 1.9MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ