Static task
static1
Behavioral task
behavioral1
Sample
NEAS.59b3ac4c7372cdff2d6b20c2c38e4860.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.59b3ac4c7372cdff2d6b20c2c38e4860.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.59b3ac4c7372cdff2d6b20c2c38e4860.exe
-
Size
14KB
-
MD5
59b3ac4c7372cdff2d6b20c2c38e4860
-
SHA1
9d51bae2188ca40d6854c4dd6967ca3121701985
-
SHA256
ff50dd36d9b822af0384bb0c01db8dd8b892a4724480222924477e001846cfd8
-
SHA512
8d2315767f089202f174e55480bc49319ab403dd21fb27b10ce23932752ebcb6a0eacc8f3cfded9c0b57de55c2f03f91bb777109369e125f95aa02276b03a2b0
-
SSDEEP
384:j5htittD1yF21hWeuP3ndSav3X8sZDE045HBo:j1gDnUPnddss5An
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.59b3ac4c7372cdff2d6b20c2c38e4860.exe
Files
-
NEAS.59b3ac4c7372cdff2d6b20c2c38e4860.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ