Static task
static1
Behavioral task
behavioral1
Sample
NEAS.279be4ed8c61e081d502ea26e9b79d50.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.279be4ed8c61e081d502ea26e9b79d50.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.279be4ed8c61e081d502ea26e9b79d50.exe
-
Size
14KB
-
MD5
279be4ed8c61e081d502ea26e9b79d50
-
SHA1
8a6aedab4cfb2f8d2d4c2a19d792b769471350f9
-
SHA256
0a6138f8e7ff8f8a666e3ff186a779c6ef7d797f1b50514267881740d99a368c
-
SHA512
6ca016615cb7efd7f0ac95362eb690c6babcd15daa5eaae57bcf5037bd624cfcd1a5a19f8833747177c917c60588f5fae28ed33b9fbb827e09433e7b68fb5c9a
-
SSDEEP
384:xngWmQlG442AyLU/CgTpJBdYELrhDE045HJoooo:+Q629mCkfdtXxA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.279be4ed8c61e081d502ea26e9b79d50.exe
Files
-
NEAS.279be4ed8c61e081d502ea26e9b79d50.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ