Static task
static1
Behavioral task
behavioral1
Sample
NEAS.18b0702695ee270c4ed80d05f3deaf30.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.18b0702695ee270c4ed80d05f3deaf30.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.18b0702695ee270c4ed80d05f3deaf30.exe
-
Size
40KB
-
MD5
18b0702695ee270c4ed80d05f3deaf30
-
SHA1
12e0825ba1375da0a042fc2e2e87fbe4fad7b650
-
SHA256
e1d2538133e345b058fadf02fd5422b676e7b5f1a7491268f831d2e288b11021
-
SHA512
44be0a4891829540fc42570f6a968b64861b1bb342ecf2caf1b97e7f484a088b3db837b4349f8b606d4ac89d29372ba76bb6c0234a207ad96c49cf2d4ab95453
-
SSDEEP
384:8FLOI1k+YPNPNPNPNPNPNP6xwZZZZZDgmiLzDE045H:8FLOhfVVVVVVzLijA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.18b0702695ee270c4ed80d05f3deaf30.exe
Files
-
NEAS.18b0702695ee270c4ed80d05f3deaf30.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ