Static task
static1
Behavioral task
behavioral1
Sample
NEAS.17f8c4b4baca61b7b650ee6f3a03ffa0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.17f8c4b4baca61b7b650ee6f3a03ffa0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.17f8c4b4baca61b7b650ee6f3a03ffa0.exe
-
Size
232KB
-
MD5
17f8c4b4baca61b7b650ee6f3a03ffa0
-
SHA1
d318367e0023c82c4d7e2d07fc8e77f7de5c75ea
-
SHA256
293f2173a9296c00cd57863472d0a1a2acf6be986f608ae4c4023c24850d4597
-
SHA512
bef5cc691905232973801732615bad5f208e7ae0b8d5851dec511c3c4375a545c48cfc10643f1374a75f617b5fce9ce4f671ae39d952b53c60ef8358f0e77efb
-
SSDEEP
768:A0XxuGVFdkNZwQAz8np7WFm2yORsr60iHl1xIugOi90dFkRv4izGk4e2p/1H5w2R:DxdkDk8n9RD+1rgOlkRXzP2LjAMt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.17f8c4b4baca61b7b650ee6f3a03ffa0.exe
Files
-
NEAS.17f8c4b4baca61b7b650ee6f3a03ffa0.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ