Static task
static1
Behavioral task
behavioral1
Sample
NEAS.99b101ff103ee6e1bc3ec22b045d76b0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.99b101ff103ee6e1bc3ec22b045d76b0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.99b101ff103ee6e1bc3ec22b045d76b0.exe
-
Size
768KB
-
MD5
99b101ff103ee6e1bc3ec22b045d76b0
-
SHA1
1c8287a62513db1f156c4d33a662ba261b0b947e
-
SHA256
fde63f49fd6956b01b233698e7f11a3ad4ec7b54fcb2ac062fb0b94abe33bf80
-
SHA512
6a11d49cb862a79e6464bcb78eabbf9eec3e013050ff5e3be723a1f0a001822b9e6aba8f6209a53dcb99b0dc4535626cbaa5b632e893a78ae5b42144e47bf616
-
SSDEEP
12288:IyoxSpDS5cTfsrtPdOy4nVY5/pBdNQxI8OiVhwFAYhWyo:mxSY5cHY5PoYiVmFpM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.99b101ff103ee6e1bc3ec22b045d76b0.exe
Files
-
NEAS.99b101ff103ee6e1bc3ec22b045d76b0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 751KB - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE