Static task
static1
Behavioral task
behavioral1
Sample
NEAS.6c94f67efcb6de91e02076859ebbac50.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.6c94f67efcb6de91e02076859ebbac50.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.6c94f67efcb6de91e02076859ebbac50.exe
-
Size
14KB
-
MD5
6c94f67efcb6de91e02076859ebbac50
-
SHA1
1cf5c98b6e6668d160c8942e2c899b2748a1153a
-
SHA256
4a7664cc1f184ca13f7c169e623944c5b9f7cd0c9fe8f4fa4875f3c6e96cae0f
-
SHA512
8e57118bec4df316cb3df43c164a1490f86746c02946bd6beef92390e65b8f4367510c3454ecb5f6438b980368879a74e228cccddf943e84308a8bd29340e60e
-
SSDEEP
384:LDXjx/PCWxxxxxMcXOfjhiDE045Hhnnnnk:LDTdxxxxxzXyYA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.6c94f67efcb6de91e02076859ebbac50.exe
Files
-
NEAS.6c94f67efcb6de91e02076859ebbac50.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ