Static task
static1
Behavioral task
behavioral1
Sample
NEAS.63f85aac07020382f07567a8f5a89500.exe
Resource
win7-20231130-en
Behavioral task
behavioral2
Sample
NEAS.63f85aac07020382f07567a8f5a89500.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.63f85aac07020382f07567a8f5a89500.exe
-
Size
801KB
-
MD5
63f85aac07020382f07567a8f5a89500
-
SHA1
b0d4af7079dcfaafaeb2dee1aba012072f4fcf10
-
SHA256
d14e8038c48de42ab0480dc4edbf07f0b557d48e25df734f79e067f6a163507f
-
SHA512
6032fab2b6ecfdc5a43e10f1a71d406786cb094a7ed8188e91f4da167e8e5fdd99bb029acf3c7cfe3ff1a3f6ad9019482b36d1b77c7f281b67344bbc8b29296c
-
SSDEEP
24576:z2wTMHe3B33dvlHsm/Ps+llRTScMDhFWk:NIqndvB+cEUk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.63f85aac07020382f07567a8f5a89500.exe
Files
-
NEAS.63f85aac07020382f07567a8f5a89500.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ