Static task
static1
Behavioral task
behavioral1
Sample
NEAS.407a70a327ac48185b9d2995dee3c000.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.407a70a327ac48185b9d2995dee3c000.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.407a70a327ac48185b9d2995dee3c000.exe
-
Size
188KB
-
MD5
407a70a327ac48185b9d2995dee3c000
-
SHA1
ba1ac567db5ef81524af4a8f0a2d2f966bf6833c
-
SHA256
66862b5fea5027a563b95397613bd7a64c2e32d5b7aa9a4108d933e809eedf5c
-
SHA512
304c6d5f2af25a0811cc1b3ee4770259704a2c4736cc7c5edb41bc7cb474b5cbdc94f6f8fb037cfc523ee395b5139cc16a8430ce08af1950729a84d25f08705e
-
SSDEEP
768:ClM5TrJ+5xNTQDtp/fT21CO734YLP6t5rH5G0MxQVM1sl:EMNJ+5/Tip/buCsz+vH5G5ums
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.407a70a327ac48185b9d2995dee3c000.exe
Files
-
NEAS.407a70a327ac48185b9d2995dee3c000.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.embm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ