Static task
static1
Behavioral task
behavioral1
Sample
NEAS.97b732b8b32c168ab2eac5f523747c70.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.97b732b8b32c168ab2eac5f523747c70.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.97b732b8b32c168ab2eac5f523747c70.exe
-
Size
14KB
-
MD5
97b732b8b32c168ab2eac5f523747c70
-
SHA1
b0ec86930ebe362f199761405c62a7735e7dd814
-
SHA256
f5bcc4de69bedfc51e465b4d6dd8b4a657e8768f7dbdc4c0611c30e38d00c217
-
SHA512
9593965928e613350355d5a0aad68eb4fd1f35d0bfaa3676309c9603654c2048c972565988b6b46c1ebddc1c9544052a6107c5f1c9a4df105790831d97c889a5
-
SSDEEP
192:WSvYnu4Val6b5TktKs07777777nnnnnnnQd11trK9qDE045HQ0KKK:W3yli5TkQcnekDE045HfKKK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.97b732b8b32c168ab2eac5f523747c70.exe
Files
-
NEAS.97b732b8b32c168ab2eac5f523747c70.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ