Static task
static1
Behavioral task
behavioral1
Sample
NEAS.6653fce847d5cdf7be66104186596770.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.6653fce847d5cdf7be66104186596770.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.6653fce847d5cdf7be66104186596770.exe
-
Size
536KB
-
MD5
6653fce847d5cdf7be66104186596770
-
SHA1
edde57d28df4cc97c83798a0296cda5d71893bbf
-
SHA256
c7d27a3d8d7169a7b6a0e9b1d80c5537641fccf5c40ced87aeba872f5fa37ea2
-
SHA512
78101c8140207c53903c10912c0dfb5a8e550fad3d0d7977b3487f781b59bf887d7a5f22b73424d3479dc5d29c61ace3b182426faefefccae47664612d9f0294
-
SSDEEP
12288:gWBm+95nHfF2mgewFx5nWG1gLEHDxQh3Q0sy1kfgjdkA:gWBz95ndbgfx55yL0+3Q0OgjT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.6653fce847d5cdf7be66104186596770.exe
Files
-
NEAS.6653fce847d5cdf7be66104186596770.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 200KB - Virtual size: 199KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 182KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.l1 Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE