Static task
static1
Behavioral task
behavioral1
Sample
NEAS.e6cff036b9d3f13960be24c4a48191f0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.e6cff036b9d3f13960be24c4a48191f0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.e6cff036b9d3f13960be24c4a48191f0.exe
-
Size
614KB
-
MD5
e6cff036b9d3f13960be24c4a48191f0
-
SHA1
69107f429e8c9248cbce8981845f70cdb8fe41ba
-
SHA256
e1930ce92633cd5adb0216f45dc697f608330dc87c2cc13a82e7b87a810e73fa
-
SHA512
187dc3e1cf34034dd2f8f3afd0024b943fe5856d9eac6143e386a29a15047561ae2b05065eb2bff168261996d062d0c8a22af808da8220579936a3c94644ebcd
-
SSDEEP
12288:zJMxy+7S7p8PVYX1chSciGbnX5NXcztAXfk5Qo+yfFlQoBWVsL0ZXSAhJgAu:z2wTMuX1fI5NXhXMhfHQ3tXtT6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e6cff036b9d3f13960be24c4a48191f0.exe
Files
-
NEAS.e6cff036b9d3f13960be24c4a48191f0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ