Static task
static1
Behavioral task
behavioral1
Sample
NEAS.6f29932cff4785d9914f799ecfd04c10.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.6f29932cff4785d9914f799ecfd04c10.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.6f29932cff4785d9914f799ecfd04c10.exe
-
Size
912KB
-
MD5
6f29932cff4785d9914f799ecfd04c10
-
SHA1
eba68eac814e37994dd803ff8c7bb8f68e55d08d
-
SHA256
fc9bfa5e0a24bf67d0349a01d4326ef59a09e95bcd51d6a4f3d3624d565fb505
-
SHA512
96af288b28593fadd317874286b0632e99701c1cab2df00e7a193f2dac3e9a06abbb94483de4f3b3d211f5eeb1e7e514f5918694822ac03c7c13b7da5d59f65b
-
SSDEEP
24576:zzqxG2Z9mILdsVqIlJXPJYPVkrUzVwAe7V2dGA/8C:XMmBg4IVkC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.6f29932cff4785d9914f799ecfd04c10.exe
Files
-
NEAS.6f29932cff4785d9914f799ecfd04c10.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ