Static task
static1
Behavioral task
behavioral1
Sample
NEAS.1180f6577894e38c2e103c0ba9e20380.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.1180f6577894e38c2e103c0ba9e20380.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.1180f6577894e38c2e103c0ba9e20380.exe
-
Size
152KB
-
MD5
1180f6577894e38c2e103c0ba9e20380
-
SHA1
14bd86ec5fcf1d6b7fc3e4208e4ade2d7d40d6ec
-
SHA256
7867b2726b7b9458f2090b71bbf6f0e9f78ce0c00ec62ac5661f0f7779fbc37d
-
SHA512
643cc16689ef2d2cd07335e26aa0bbe505a9ce007f55be859dd489cb74abe57fc6e63740278a7511e7c43899fab644823904835987145311cb7f2ca38269395d
-
SSDEEP
3072:gCMiqJl3v1S4AsvdhxBz8bNk/AKItB/pL/s9hlSLUFWz:gCMzfM4vxBIO+XpDnUUz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.1180f6577894e38c2e103c0ba9e20380.exe
Files
-
NEAS.1180f6577894e38c2e103c0ba9e20380.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 126KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ