Static task
static1
Behavioral task
behavioral1
Sample
NEAS.7b77f593063de9cf27b6b9e631df0c90.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.7b77f593063de9cf27b6b9e631df0c90.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.7b77f593063de9cf27b6b9e631df0c90.exe
-
Size
52KB
-
MD5
7b77f593063de9cf27b6b9e631df0c90
-
SHA1
69c45e5019d32f4833a9980128a92bc8cff118d1
-
SHA256
e272128308e6158f70632b01613969481b6fe839c8171085cda25288931eeb69
-
SHA512
836aff5e7a18423370781c53de9825095eee96db6319a79fe510bdbd20a1328770e9003d78020d2bd714dfdb50a5dedc33c6335fc8afaefa9a6f40ee07b06926
-
SSDEEP
768:TqGj/jEsvardlHkEyUhM3GODMCVXvjpHZyKLtrb9Vwc/1H5F/sUUMABvKWe:TzjALvHkEyL20zZVh9b9CSaMAdKZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.7b77f593063de9cf27b6b9e631df0c90.exe
Files
-
NEAS.7b77f593063de9cf27b6b9e631df0c90.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.embm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ