Static task
static1
Behavioral task
behavioral1
Sample
NEAS.42174843b4f5e3577b6ff7687c60f320.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.42174843b4f5e3577b6ff7687c60f320.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.42174843b4f5e3577b6ff7687c60f320.exe
-
Size
212KB
-
MD5
42174843b4f5e3577b6ff7687c60f320
-
SHA1
9a45c8a6145028f1ad3a3addb988eeaeaff7cfe4
-
SHA256
9aa2cf75f39b4c52800b3b2d411293af4d5d402c2aa20ea03c666552075f3188
-
SHA512
7e9655061428e6955323ad5c7f5abcabbd7615f8f2d85eabdaedaa37e8d8b095518250ef123a54627f124187e86a4081a5b53a85b63eb3fb0e605f200e6d3d77
-
SSDEEP
1536:+rP4GHDLf7QR6t9ijMi2Sg2pDteYgvyPCT0PTaDzoO0+OCUfWJbc9LF:e4yXPiF2Sx0PeT2zv0+OFWJbc9L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.42174843b4f5e3577b6ff7687c60f320.exe
Files
-
NEAS.42174843b4f5e3577b6ff7687c60f320.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 105KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE