Static task
static1
Behavioral task
behavioral1
Sample
NEAS.404443ed6b13f29e8b1126fac0d0dd70.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.404443ed6b13f29e8b1126fac0d0dd70.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.404443ed6b13f29e8b1126fac0d0dd70.exe
-
Size
14KB
-
MD5
404443ed6b13f29e8b1126fac0d0dd70
-
SHA1
f6205619be2161cad771fdf6920f956cbba8afd4
-
SHA256
546e7bd01230a6f8bfbb7e3c175a90f7b30e5c84b139b9e1bd12a9c0cfd2fe22
-
SHA512
83f606ff96ae1259f8ad0e5bf4e5f31a92ab86a7d66277def2a7672bcd1aef8a7f41723a21f864ac35157d25543523a6f2a203423c94c0518981adb8f113b9ed
-
SSDEEP
384:CRnH8Ue7bD1RRRRRzTxDE045HSFG+IwFG+IwFG+IwFG+IwF:CRsbD1RRRRR/BAEUjwUjwUjwUjw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.404443ed6b13f29e8b1126fac0d0dd70.exe
Files
-
NEAS.404443ed6b13f29e8b1126fac0d0dd70.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ