Static task
static1
Behavioral task
behavioral1
Sample
NEAS.144013ee653c89feee13ff203abfaf10.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.144013ee653c89feee13ff203abfaf10.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.144013ee653c89feee13ff203abfaf10.exe
-
Size
3.9MB
-
MD5
144013ee653c89feee13ff203abfaf10
-
SHA1
b39dda358442ef93504bc7d0e645ea4924beefee
-
SHA256
ff236b672b6b9b13e590b0941142cc5ab291e5d88e9b840a12aa32e537cde37c
-
SHA512
4e4b4bacff5b0aa355f633f6ac74e8de68ed45fe99b39d865960f0ff1dede77d8444be365d1d42686eb7dd200475f30a10f15460d75b61ad41c5ee522409683b
-
SSDEEP
49152:padpFZx1nkQoqvUbvgXELEnAR0gXV/XB+7nZE1GhnuFnNeNMWo8CWgiV5omI05Id:iFZxeecao3yudFnN0DHIetQHj3D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.144013ee653c89feee13ff203abfaf10.exe
Files
-
NEAS.144013ee653c89feee13ff203abfaf10.exe.exe windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 222KB - Virtual size: 222KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 576KB - Virtual size: 580KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE