Static task
static1
Behavioral task
behavioral1
Sample
NEAS.71904c8a743fd0bafbc013d9bd2b4d40.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.71904c8a743fd0bafbc013d9bd2b4d40.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.71904c8a743fd0bafbc013d9bd2b4d40.exe
-
Size
52KB
-
MD5
71904c8a743fd0bafbc013d9bd2b4d40
-
SHA1
9d4f5b32d4c46c94d598db8f4814a14926820784
-
SHA256
0eab8e442325a6932ff1f718aef7c537be8e323ce613e6a3c20516137a491421
-
SHA512
bd111709898f9bad84841898db2a4fd957ef6f41e91531e83e757aad587f8521d6d7c8168e8403ca9b72e7e549f8985ba7ccb5a1d21b98dbe3f36d7efad8ac41
-
SSDEEP
768:TlX4ycZadee24y7f6cA8iu3IxDhtNUzN1GP+Sm8Hs8ckQM/1H5F/suMABvKWe:ZwZadeexYf6v8Kx9zULG3M8zTMAdKZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.71904c8a743fd0bafbc013d9bd2b4d40.exe
Files
-
NEAS.71904c8a743fd0bafbc013d9bd2b4d40.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.embm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ