Static task
static1
Behavioral task
behavioral1
Sample
NEAS.552944d1c8f63e07c0ccd5c352bc6ca0.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.552944d1c8f63e07c0ccd5c352bc6ca0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.552944d1c8f63e07c0ccd5c352bc6ca0.exe
-
Size
14KB
-
MD5
552944d1c8f63e07c0ccd5c352bc6ca0
-
SHA1
561ac85863888b94e056192a484586464ab95b98
-
SHA256
8b0cff5d4c23b0f3c3130645ab92f0aac4bb4b01ebd93f90cb93fadb711bd009
-
SHA512
407e038793d95711071246e29bbe0bbd07e12d14b6dc9160430fdfe347e28b8722fbaed8490ac175380845b22d6eada99c1fa658c283b5f98aaa3e75dde21708
-
SSDEEP
192:AbbZIGEVzy0u2N8MwxCC4PNjvMJkGuitzkLvfJxaQb9XdYo89GgfnqDE045HQ3O3:A3iGKy5uZZdvM6Fi1KvDDp4nyDE045H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.552944d1c8f63e07c0ccd5c352bc6ca0.exe
Files
-
NEAS.552944d1c8f63e07c0ccd5c352bc6ca0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ