Static task
static1
Behavioral task
behavioral1
Sample
NEAS.8ed84c56a502128c6f650f20761672c0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.8ed84c56a502128c6f650f20761672c0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.8ed84c56a502128c6f650f20761672c0.exe
-
Size
14KB
-
MD5
8ed84c56a502128c6f650f20761672c0
-
SHA1
77ded77d9f1d74ce28b68cba00815466274c3191
-
SHA256
cf0e274571f619b6c2aac5001cdb9251fc1403594c3fa8d0e5492bcb13ec59d4
-
SHA512
33247ae9db0b5e230c486d03ef512f296d961abb427afb2d7d5b602ed6303eeb8e2958060886d59254d7b3074b63bf6d4b26b0e28b4a385733d175801ec5313b
-
SSDEEP
384:fNFgTeytHD2IelaNEGacUWfwj7QPDE045H:fgC4IfjkbA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.8ed84c56a502128c6f650f20761672c0.exe
Files
-
NEAS.8ed84c56a502128c6f650f20761672c0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ