Static task
static1
Behavioral task
behavioral1
Sample
NEAS.92647acfdd46647b2033f24f994510f0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.92647acfdd46647b2033f24f994510f0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.92647acfdd46647b2033f24f994510f0.exe
-
Size
52KB
-
MD5
92647acfdd46647b2033f24f994510f0
-
SHA1
af87285913541ba3686435c67748a0a672af8180
-
SHA256
94beafacb54597a4aa04da07c1bb1ae856f6c4af52c6aff5e766dd8f52bf39fd
-
SHA512
5f7ed477f6d47b55f795f8eaa8e04f97218b1f57c0538cac85b2a0b43899087987ba4a1cac558bb660a5bc046c788cde1b1230f30d0a1d5f770fb69260839b27
-
SSDEEP
768:HcVBTnUUx1RAmVL+8a27G1p77DD9HNpp1V8z2W/1H5F/s5xMABvKWe:HcBTH1RASy8aOkxHZ1eC8WMAdKZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.92647acfdd46647b2033f24f994510f0.exe
Files
-
NEAS.92647acfdd46647b2033f24f994510f0.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.embm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ