Static task
static1
Behavioral task
behavioral1
Sample
NEAS.6b43a8be746a81736be477b4d6251b50.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.6b43a8be746a81736be477b4d6251b50.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.6b43a8be746a81736be477b4d6251b50.exe
-
Size
188KB
-
MD5
6b43a8be746a81736be477b4d6251b50
-
SHA1
4e5693f548eeaca1495b3f183b9bbb49dbd35160
-
SHA256
55c524d2bb19656b83b3f9e17842573afa82efaa7bfdb2e8cc19f67ac87fada0
-
SHA512
371a708c0228a70f1a082d42906e426e6528acc5b16a05be23486dfd73beab43d69a0a3a5b0327fd08a94de6cff0b951fe80d8b2eb8d909fa3123bc5fbb1281f
-
SSDEEP
768:Qq8DVUHdQ6CmsYiBSkgBxvBY/C6gk8MMV1lfx51Poe3o0+Ojea2yOK+6WSuqSVzh:xHFFsjSkgBxvBY/C/ZMMDlJ5qeJAqO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.6b43a8be746a81736be477b4d6251b50.exe
Files
-
NEAS.6b43a8be746a81736be477b4d6251b50.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.embm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ