Static task
static1
Behavioral task
behavioral1
Sample
NEAS.639bb6b9dd145393bb16990423f45e90.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.639bb6b9dd145393bb16990423f45e90.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.639bb6b9dd145393bb16990423f45e90.exe
-
Size
390KB
-
MD5
639bb6b9dd145393bb16990423f45e90
-
SHA1
b6e60f8b6bd2439b7c31c9cbea4686c855dfa7be
-
SHA256
e449d8cfa126911ed5c4f04b551b1b763553de4e07fc875cdaef9c29f0e4515e
-
SHA512
fa9331d615ebf65c4ab13aaa86a78adb9ac0f7a7cb6c17d980c941e19da89b30a00312d188b2f318d8bcb11434bfe5e3b044fb3de3a9d888ba276e520033b624
-
SSDEEP
6144:it03a62hzpSNxV2qcJVLNyTiY6wDyIJ2r/bll:Os52hzpHq8eTi30yIQrDll
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.639bb6b9dd145393bb16990423f45e90.exe
Files
-
NEAS.639bb6b9dd145393bb16990423f45e90.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
packerBY Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bero^fr Size: 177KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE