Static task
static1
Behavioral task
behavioral1
Sample
NEAS.f171deb1f076d2b78bbd1d14570a7420.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.f171deb1f076d2b78bbd1d14570a7420.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.f171deb1f076d2b78bbd1d14570a7420.exe
-
Size
4KB
-
MD5
f171deb1f076d2b78bbd1d14570a7420
-
SHA1
92e1dceb51f15672de74f4ce1315f56a3532306a
-
SHA256
fbe6e4eb4b839537ac26428b69497520c9694e80aa6a57448ec912fdb1858638
-
SHA512
7a5b437726dc36e47e074cbea9cf172848a1896f7d4f74382b170b68cedcaf1592de79ae60e1e4bb693ef295fbd4a8544da69abb0f3b28d323575e22f2616947
-
SSDEEP
96:LtIdSLQPZARC3dCE8Y0Jw5NL6EVwHHKg2:JswdRCNCE8YPWowHHK7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.f171deb1f076d2b78bbd1d14570a7420.exe
Files
-
NEAS.f171deb1f076d2b78bbd1d14570a7420.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
1z60clhb Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
c413cgix Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
a4z6fyyb Size: 576B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE