Static task
static1
Behavioral task
behavioral1
Sample
NEAS.9ddee3ed2ff82cfdd4dd713f28694d60.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.9ddee3ed2ff82cfdd4dd713f28694d60.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.9ddee3ed2ff82cfdd4dd713f28694d60.exe
-
Size
14KB
-
MD5
9ddee3ed2ff82cfdd4dd713f28694d60
-
SHA1
4a0d9a82c1c5b9314441c1d63d6e84cf17b57368
-
SHA256
c185d321d432059f56e8be7e1c8dc2998f76116166ff5ad60d17c76792f3735d
-
SHA512
9f9d4e73dff3492ab910e95a8cefaaa5751cfef878d4f6dc9776b970390fb1064702b37e32cd111ecaee166b0cf2ee14fdabca241b88490af2b582a73d0795d2
-
SSDEEP
384:wJ53+5dsVEbYK1CK1ngDgDgDgDgDgDgV6E+DE045Hha:wJ53Qd5rtAm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.9ddee3ed2ff82cfdd4dd713f28694d60.exe
Files
-
NEAS.9ddee3ed2ff82cfdd4dd713f28694d60.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ