Static task
static1
Behavioral task
behavioral1
Sample
NEAS.102079161199d042958d606765116c80.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.102079161199d042958d606765116c80.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.102079161199d042958d606765116c80.exe
-
Size
26KB
-
MD5
102079161199d042958d606765116c80
-
SHA1
47f685d4e22a8e4678007d91c833dc39ad6696a4
-
SHA256
8caadb4e68c94c2b31be0298245528024f02193dc03884c5c3aa5c8a39755594
-
SHA512
c5fcbf4760ee2c7c657a823f45a02148c22c925426b6e1e7306edc9056e360e9e797ff7c90a6c5d5c651f3608c675287b8d370383f4291ff3249481040d8d385
-
SSDEEP
768:md5u7mNGtyVf7AsQGPL4vzZq2o9W7GsxBbPr:md5z/fcvGCq2iW7z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.102079161199d042958d606765116c80.exe
Files
-
NEAS.102079161199d042958d606765116c80.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.rsrc Size: 6KB - Virtual size: 32KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
coderpub Size: 2KB - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��su�u� Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE