Static task
static1
Behavioral task
behavioral1
Sample
NEAS.f953611d7fcccf9c3d81b5342f931c50.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.f953611d7fcccf9c3d81b5342f931c50.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.f953611d7fcccf9c3d81b5342f931c50.exe
-
Size
40KB
-
MD5
f953611d7fcccf9c3d81b5342f931c50
-
SHA1
66cb07be040d1a76af162ae02c061a017589eac5
-
SHA256
ace1d3c96e023c1a1484e8b95e8f7ae855a79c537f7ae45a42b93cbb72c81364
-
SHA512
caadc4e0ce04751bd1adab6985dcb88d40bfe7aa34e3b47a1d0dbb1538f63f6527b2dfe91443af2c6687073e87e926cc74d4d253efe261c93d061e514e0dae95
-
SSDEEP
384:xVElrgevCU4R7gv7bx6djJzGynZMGcoDE045H07777:HElrgnU4lgv7bx6LKCMhyA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.f953611d7fcccf9c3d81b5342f931c50.exe
Files
-
NEAS.f953611d7fcccf9c3d81b5342f931c50.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ