Static task
static1
Behavioral task
behavioral1
Sample
NEAS.9791cc4db55534a77e7c7bd9ae9e49e0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.9791cc4db55534a77e7c7bd9ae9e49e0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.9791cc4db55534a77e7c7bd9ae9e49e0.exe
-
Size
40KB
-
MD5
9791cc4db55534a77e7c7bd9ae9e49e0
-
SHA1
83056f97ab080d9dc7b148833c573f4f384ec3ef
-
SHA256
5ab33a6d2d8ad46f90f1b433f0e3470ca1cdd1a1421636d577d10c3a6a3832aa
-
SHA512
f7a7af0dee223427af33349659cfa6ee23d7fa622f4235a4d864319f5609cf8c8e6815159c071191386174da7120e47a7c79f136d5eb26f6dd20cd33600acf51
-
SSDEEP
384:KpNX2MHjV/KxcHGkY4xxxxxxKqu2cn2KVDE045HO9R9R9R9R:UNX7xbGUxxxxxxX34AgPPPP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.9791cc4db55534a77e7c7bd9ae9e49e0.exe
Files
-
NEAS.9791cc4db55534a77e7c7bd9ae9e49e0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ