Static task
static1
Behavioral task
behavioral1
Sample
NEAS.8999d16b1909be0ffc64281064e3c2c1.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.8999d16b1909be0ffc64281064e3c2c1.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.8999d16b1909be0ffc64281064e3c2c1.exe
-
Size
80KB
-
MD5
8999d16b1909be0ffc64281064e3c2c1
-
SHA1
571a540ddc1d51feefaa85691df3b4a71d5052c5
-
SHA256
658b09547cdfd9012d1c3d5797079fb592cb6111b2cd49d89c4cf9e2e787620e
-
SHA512
38be1d949249460fb543299c2514ef7f1971addea34783c82f396e86c7da85927dd41f998a5bd25bd350fe17665577d4dcff8e84c74dd59db1df7de61b944ff0
-
SSDEEP
1536:cx7aXceWAebstcRl3iNC8RbzDfWqdMVrlEFtyb7IYOOqw4Tv:27RwNTZzTWqAhELy1MTTv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.8999d16b1909be0ffc64281064e3c2c1.exe
Files
-
NEAS.8999d16b1909be0ffc64281064e3c2c1.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fldo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ