Static task
static1
Behavioral task
behavioral1
Sample
NEAS.167b38fb4740784e6254be314c693670.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.167b38fb4740784e6254be314c693670.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.167b38fb4740784e6254be314c693670.exe
-
Size
40KB
-
MD5
167b38fb4740784e6254be314c693670
-
SHA1
161636a88499214a2bb1c7789f7e360e9c1084f3
-
SHA256
7944cec039fdd6450a16dd62462ee58b93f253bee58909c5c4f7add9242cc075
-
SHA512
88c3124e5fd1f4933efdefa6e38ba21190aedcdb2bc0a5014edaf344e844155996928b3de7da96b727db97a52c94e08dae98f233313309be8902b09ebe05bb89
-
SSDEEP
384:PmOxlURL1LMLMLMLMLMLM9Nx4oDE045H:PpYLBSSSSSiA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.167b38fb4740784e6254be314c693670.exe
Files
-
NEAS.167b38fb4740784e6254be314c693670.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ