Static task
static1
Behavioral task
behavioral1
Sample
NEAS.621cd8023bf401108dfe17538d1c5910.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.621cd8023bf401108dfe17538d1c5910.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.621cd8023bf401108dfe17538d1c5910.exe
-
Size
7KB
-
MD5
621cd8023bf401108dfe17538d1c5910
-
SHA1
ef7fd0909f73712d5eca8be3db4ca33d4b0fca31
-
SHA256
0b1f92d8297224c3d2bdc0e162dc20aae8d8f64071c33ca8e239c0810aceb848
-
SHA512
6c2b375d98660779bf28b237cba18cad57d2ad20b1a7bd15f95b460e3eca7dfbc7540d871e06a6faed3d752cb3a2b90e16639213035571a16a9b97716af94a60
-
SSDEEP
96:I8fAM/JGbqq7HCPEmMtHacG6Y12wcIa+:nfAM/JGGq7iPEmA+1yIa+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.621cd8023bf401108dfe17538d1c5910.exe
Files
-
NEAS.621cd8023bf401108dfe17538d1c5910.exe.exe windows:4 windows x86
e6a3780e5f8073314147700240afcb50
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
vb40032
ord617
ord632
ord645
ord670
ord100
ord186
ord530
ord537
ord595
ord600
Sections
.text Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ