Static task
static1
Behavioral task
behavioral1
Sample
NEAS.a6d50846630cdf10b8a69d976b221820.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.a6d50846630cdf10b8a69d976b221820.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.a6d50846630cdf10b8a69d976b221820.exe
-
Size
40KB
-
MD5
a6d50846630cdf10b8a69d976b221820
-
SHA1
102d35214ce5c45338c3b4e19d3f3a7caefbe871
-
SHA256
f50c3dad66f49c65f2b957e25312ca7fcbf7dc7fc09c6a3d41a5d04ea9a5bd2e
-
SHA512
1af3ef15612a77a3fe3ad0a616e475f326bf1e6d9c801ccc1a7239bdae5d02b263272ad2927c480514c64ede91ca4d1edb08266b94d8b50ce38712d79113cd15
-
SSDEEP
384:fVS5bRydg/TTTTTTX4444444ctY1s9e4/LywDE045Hrfff:fVpdpT4/bABfff
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.a6d50846630cdf10b8a69d976b221820.exe
Files
-
NEAS.a6d50846630cdf10b8a69d976b221820.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ