Static task
static1
Behavioral task
behavioral1
Sample
NEAS.8d43b2c1241650ae05753c3222620070.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.8d43b2c1241650ae05753c3222620070.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.8d43b2c1241650ae05753c3222620070.exe
-
Size
4KB
-
MD5
8d43b2c1241650ae05753c3222620070
-
SHA1
51a5a5673e9de77afca7401805ba00d45b36cd32
-
SHA256
8f3d75a14e2aac273f53831bf5362ff42979b93a8e6aedeb60fe3733fa0e341c
-
SHA512
95361ebda64e291afab0d203ee743aa3322f8878648f16579d89d63f57fe832e77fa58806851027f9c0832fae5139c37c626916773efc54c630fc239bcdb21c8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.8d43b2c1241650ae05753c3222620070.exe
Files
-
NEAS.8d43b2c1241650ae05753c3222620070.exe.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qebs Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE