Static task
static1
Behavioral task
behavioral1
Sample
NEAS.5106b6f8bef4e88a575949a4e7148030.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.5106b6f8bef4e88a575949a4e7148030.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.5106b6f8bef4e88a575949a4e7148030.exe
-
Size
14KB
-
MD5
5106b6f8bef4e88a575949a4e7148030
-
SHA1
21c7c72ede295827c536f40d968fad32829f91a1
-
SHA256
dc00cc47b3ad496ae50cc74ccc38f4c3185512a477d88c3a6e3e06b9fc1a15ad
-
SHA512
1a2905de9d775ede6a07e98cb425f87e34d42225bcf66e2e79d8845a875339f9266bbeebcb3827ad3efdde4af15ccdb2165ecf36429fa933865fa0349cb617ad
-
SSDEEP
192:SlJfIHSAohpt83SqhmSqhmSqhmSqhmSqhmSqhmChhhhhhw/kPBFC8cqDE045HQk3:SlJ+yP8ieeeeePkPB0uDE045HLpppp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.5106b6f8bef4e88a575949a4e7148030.exe
Files
-
NEAS.5106b6f8bef4e88a575949a4e7148030.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ