Static task
static1
Behavioral task
behavioral1
Sample
NEAS.9749c4667a6972d1d91a47a7c3c0b840.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.9749c4667a6972d1d91a47a7c3c0b840.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.9749c4667a6972d1d91a47a7c3c0b840.exe
-
Size
140KB
-
MD5
9749c4667a6972d1d91a47a7c3c0b840
-
SHA1
e49df69fbc493305eeb4b75b81740b26abdd8dc3
-
SHA256
6874697c9389cfd914048c6ccaedd0270d47711d92ca9dee9d5295ced3231b79
-
SHA512
884b5a530586a72f7a964fc7a7365f2410746713842684aa75b170bb1e64c7584781f18a709ea83212f65c9c5cdc23e55cd8dc8c0f4e37f66bced2cc3cb91d6b
-
SSDEEP
1536:TRiAXaKD5UOtVoRlXAtXRr+4Jypr8CBDBow9NhzqPYRCC105gNMKhq9qNeZdt:liAXaKD7IAthrdtCo6KP9CG5g6K2Zdt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.9749c4667a6972d1d91a47a7c3c0b840.exe
Files
-
NEAS.9749c4667a6972d1d91a47a7c3c0b840.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ