Static task
static1
Behavioral task
behavioral1
Sample
NEAS.6d5558c4bee9bd2a3f50c0ad15e55e40.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.6d5558c4bee9bd2a3f50c0ad15e55e40.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.6d5558c4bee9bd2a3f50c0ad15e55e40.exe
-
Size
40KB
-
MD5
6d5558c4bee9bd2a3f50c0ad15e55e40
-
SHA1
831428ca4e4675db6b3c30da51571d2424f37745
-
SHA256
79c9e308c3775327ac80cc2943379fb0e91f272043e155f83f8246f3e721436e
-
SHA512
1a85f63c59d4675483e1f703af62be0f44868cf3c01c131ae07e0f6fd0ec0f8096db5e67706c5cb622258347c5fa4954dbb95ff1cb6b1ec2d37266f6c2f1de6b
-
SSDEEP
384:fVA1QGe4iru4JdkofhrnOaEDE045Hz0s0s0s0s:fVA18uUkOkAFXXXX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.6d5558c4bee9bd2a3f50c0ad15e55e40.exe
Files
-
NEAS.6d5558c4bee9bd2a3f50c0ad15e55e40.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ