Static task
static1
Behavioral task
behavioral1
Sample
NEAS.9da0bea2557fa0d945972fe10f93c6d0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.9da0bea2557fa0d945972fe10f93c6d0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.9da0bea2557fa0d945972fe10f93c6d0.exe
-
Size
89KB
-
MD5
9da0bea2557fa0d945972fe10f93c6d0
-
SHA1
84232b7cd32dff97932be70beb962694f0b32d17
-
SHA256
55cbfb4cc84421353cd99cf8c7c6d3917f2b9eb2411f2dc26fb5929e3566341b
-
SHA512
cdd6263976958ef673ea331620a575ee899c62e3d2d0ef07b51086656654c5d32353df6447ef656f6671e29d16991e10224b043c68f0f460caf1877af9a1ae7c
-
SSDEEP
1536:klNdxgtZHIy/bx02iPXXVVj+gBwoY3BXTBCqZ4qKsMdUhE6V0eFeEm6dJnO2hxkJ:klXxgtyWbxgXXVJ+vVNjeqKsiUW6VBd6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.9da0bea2557fa0d945972fe10f93c6d0.exe
Files
-
NEAS.9da0bea2557fa0d945972fe10f93c6d0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
dUKSqJnb Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
NUdqtLqT Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE