Static task
static1
Behavioral task
behavioral1
Sample
NEAS.1c736da8223a3c821a56a5d94d45bf90.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.1c736da8223a3c821a56a5d94d45bf90.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.1c736da8223a3c821a56a5d94d45bf90.exe
-
Size
644KB
-
MD5
1c736da8223a3c821a56a5d94d45bf90
-
SHA1
66421ab2c0ef872c87896e4407c7e1068a6a51ac
-
SHA256
e6c72733dcd7f46aed6ee41a382ac1d7ff7616c2b5e89b665ae0215aa230bb6e
-
SHA512
f712310f55d9e778d51dce9711e3d6c8dfcd8c1869e40d04e891ce6c6e1778577eb71c23bb19a6596aae0f427c5609d5e94528270a7c3e9eb630fc5c57d5d608
-
SSDEEP
12288:zJMxy+7SM0ZWxufnNU/PSaz92b82Y3plukTYafPqXiA3apYeWMcPoVO1Ba48fE:z2wTM4u/KazAbRjkKXYnWzPYE0Zs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.1c736da8223a3c821a56a5d94d45bf90.exe
Files
-
NEAS.1c736da8223a3c821a56a5d94d45bf90.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ