Static task
static1
Behavioral task
behavioral1
Sample
NEAS.6c7e5f2e4263398c8b9b3042a9bdb750.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.6c7e5f2e4263398c8b9b3042a9bdb750.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.6c7e5f2e4263398c8b9b3042a9bdb750.exe
-
Size
925KB
-
MD5
6c7e5f2e4263398c8b9b3042a9bdb750
-
SHA1
8e9b9fde9000a6922bd6e6e2d0f5af920e2f73f9
-
SHA256
883f72e7d217dea48add18f37f13267eacb2f6a724962cba8f2c75d5f8d9831d
-
SHA512
acf30e85a37e490ed9a3a3f27636116a5e82354075c3fbf393c468706228afefd132503a53af8d0fe24cb126862c34c797af369b7c59689250650456adfca365
-
SSDEEP
24576:zzqxG2Z9mIhQvq8wd7sNE6phFrC7rymrrr01N:XMmSdp2PCKP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.6c7e5f2e4263398c8b9b3042a9bdb750.exe
Files
-
NEAS.6c7e5f2e4263398c8b9b3042a9bdb750.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ