Static task
static1
Behavioral task
behavioral1
Sample
NEAS.9dbf6879b0c91984c69c6c0f67e67940.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.9dbf6879b0c91984c69c6c0f67e67940.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.9dbf6879b0c91984c69c6c0f67e67940.exe
-
Size
672KB
-
MD5
9dbf6879b0c91984c69c6c0f67e67940
-
SHA1
a9558f86b08ca2ea6d039471c355c3477b35cb63
-
SHA256
062a9fd0d5637063ba26d6d39383e16976bb7141e98d2165264a13c80213360e
-
SHA512
4dc5d44dfe864279f5a88f2106ed3766f110acd9cd906dd6fbe1dd580b9310d1cd134a62f54ec88756ab5859c408828224396700ca4299d5a9e2f5696cce9281
-
SSDEEP
12288:zJMxy+7S7p8yuL4RuKEpKp1w+xEIpUm6CIshrsszfFl4zm4BoKnZj:z2wTeLOT6Krw+2KeCI+rsAfH4zgKF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.9dbf6879b0c91984c69c6c0f67e67940.exe
Files
-
NEAS.9dbf6879b0c91984c69c6c0f67e67940.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ