Static task
static1
Behavioral task
behavioral1
Sample
NEAS.f7ff520abd6159edb0470dec3fb65890.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.f7ff520abd6159edb0470dec3fb65890.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.f7ff520abd6159edb0470dec3fb65890.exe
-
Size
14KB
-
MD5
f7ff520abd6159edb0470dec3fb65890
-
SHA1
37185d26557856d40d0978fc4db7cc13037e6d50
-
SHA256
5bc1be6b5bee6b8dfc0d5771a3fc6c0183e10b8b97a666eacbce56fd2668df03
-
SHA512
79feffea5b208a9876c3842635e1ca462f5509afd980345892c3b1686b040c7eecd7ecf614328f48aaead2dac82803a77f0b9d3d71783ac5cd777f5f11af6b12
-
SSDEEP
384:RC+1hgZQauYZiIIIIIIb5lS5vxxxxxKlWdDE045Hmiiii:Rfy2kZiIIIIIIb5lS5vxxxxxKqA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.f7ff520abd6159edb0470dec3fb65890.exe
Files
-
NEAS.f7ff520abd6159edb0470dec3fb65890.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ