Static task
static1
Behavioral task
behavioral1
Sample
NEAS.650636f40e9c31f9ebe806fa94ee2890.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.650636f40e9c31f9ebe806fa94ee2890.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.650636f40e9c31f9ebe806fa94ee2890.exe
-
Size
14KB
-
MD5
650636f40e9c31f9ebe806fa94ee2890
-
SHA1
2b5a58ff1a4bbf372e5d8b2334687ef27b1744a0
-
SHA256
5ed4b6b8d56bcc7a031d09fd5f6bf6b4469a88136526995cab8cbeed63a3b4ee
-
SHA512
97acc4527ab5e78370e3c0da174332838ef4c027aeb94d3ac0a505f013147fa192baec07b93d60c92d2ad7ddb7288721ee0868eb44873a62d8745270275f2e2f
-
SSDEEP
384:RlA/WZrOaElf3DDDDDDDDDDDDDDDI3As2DE045HihV:RlUrfDDDDDDDDDDDDDDD9scAQhV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.650636f40e9c31f9ebe806fa94ee2890.exe
Files
-
NEAS.650636f40e9c31f9ebe806fa94ee2890.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ