Static task
static1
Behavioral task
behavioral1
Sample
NEAS.a99de11016e984b1ed66013f68078910.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.a99de11016e984b1ed66013f68078910.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.a99de11016e984b1ed66013f68078910.exe
-
Size
14KB
-
MD5
a99de11016e984b1ed66013f68078910
-
SHA1
a1e47a0586e1c2f8cbbae98ed97df509953cd577
-
SHA256
b27ea8cd127bf324d38bab30adddccd5dffad34fed6ebbb28b40fab836387811
-
SHA512
ecc67b059d79f7a1ad09b00ae2e8f2a825c4323dfe9ebe4062e6d8187371d356bc522bcd23d4aa13f31468c3361b3a30ae6ceea84b2bef4a3a2571f38653a4bd
-
SSDEEP
192:7aiT06Sq1CvaqHumPi3kLe69kda03TTQjDSIqDE045HQeOOOO:7aKTSqW5i3r9dpfCDoDE045H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.a99de11016e984b1ed66013f68078910.exe
Files
-
NEAS.a99de11016e984b1ed66013f68078910.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ