Static task
static1
Behavioral task
behavioral1
Sample
NEAS.7df159f62243fbd89c98f0a93ac07d40.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.7df159f62243fbd89c98f0a93ac07d40.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.7df159f62243fbd89c98f0a93ac07d40.exe
-
Size
14KB
-
MD5
7df159f62243fbd89c98f0a93ac07d40
-
SHA1
e27024af57f1f18cfac02b708cb6fe6cc5c62b05
-
SHA256
db5a6f9d9df2c8e0848b32d6b00d0c2d78304986aa86a740e39480ae247f5f4e
-
SHA512
70fe676f02f21e7f6c41578a3d2d2c31385a72975ea867ab167cf67d2e7e1f8e64ae5d0563dd6c3989319b352c25450c68272779879352b164ce485b46094979
-
SSDEEP
384:zxe7Yy5vm73Q2Mc0LDansV4+ThI+VR1UyhDE045HI8k8k8k8k8:lGyQ2Mc0vansW+ThI+VPA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.7df159f62243fbd89c98f0a93ac07d40.exe
Files
-
NEAS.7df159f62243fbd89c98f0a93ac07d40.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ