Static task
static1
Behavioral task
behavioral1
Sample
NEAS.defe1b7517b172af199c43bde2af7d60.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.defe1b7517b172af199c43bde2af7d60.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.defe1b7517b172af199c43bde2af7d60.exe
-
Size
14KB
-
MD5
defe1b7517b172af199c43bde2af7d60
-
SHA1
ac5ce53d0b5ac15495c43906482cc8976a96e088
-
SHA256
102cd3cd3d95dc19a35cd1f739f29d56c58eedeb27812e4dfa5418d227b37b17
-
SHA512
492031e14383c54cfc8e3c138890c261030626564214e1291a43cfbe37774010aa5b236442510723c88c6d240a7a52a2c36e4655cf58ac1c960fa1c09e9d619c
-
SSDEEP
192:Xu0ILpxnctcXHByUUpCNRhaZF4v75+7uNcuyj4tcqDE045HQzFFFF:XUjnimByXsUZAta8cuystbDE045H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.defe1b7517b172af199c43bde2af7d60.exe
Files
-
NEAS.defe1b7517b172af199c43bde2af7d60.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ