Static task
static1
Behavioral task
behavioral1
Sample
NEAS.26f690ef38e73edd32df2e200ea90320.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.26f690ef38e73edd32df2e200ea90320.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.26f690ef38e73edd32df2e200ea90320.exe
-
Size
84KB
-
MD5
26f690ef38e73edd32df2e200ea90320
-
SHA1
b8b8d673f044f74fec000b7d6156aa4939a663c7
-
SHA256
e437123462b6cad860a5aa3932dbf2de2dee8c80d7cf1688d684f9603eb2a41a
-
SHA512
2974ab36c6ff13cb1778586291bbd37fdf9a40ac7a350b5effd99c3f05d0b8f352d5f5b9604bbc7c4e1bca69650fce1555f1ed1c7d8ba0f2e021c7938436947f
-
SSDEEP
768:RX47uXkpokL2Q342osjCsXPhGPhGPhGPhtU:RX47uXQD34jUQQQtU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.26f690ef38e73edd32df2e200ea90320.exe
Files
-
NEAS.26f690ef38e73edd32df2e200ea90320.exe.exe windows:1 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.bss Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NewSec Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE