Static task
static1
Behavioral task
behavioral1
Sample
NEAS.789b8fa3ba6eda4372305c0e73319720.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.789b8fa3ba6eda4372305c0e73319720.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.789b8fa3ba6eda4372305c0e73319720.exe
-
Size
4KB
-
MD5
789b8fa3ba6eda4372305c0e73319720
-
SHA1
2c6a5fb6fffcc94b7b187e86997aa52560c89dd0
-
SHA256
3f37a550a9abf584898209bd18a86665ff1e77e505519f76b8f894ae2f98c957
-
SHA512
789fab6eec83b1444118d17b240ada0f2933a21bfc01dcdce20beed2c25261a296d594bc7d1192cbd1ca77eac589bb6b981d450b641b9be45fde48c9e3141fe7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.789b8fa3ba6eda4372305c0e73319720.exe
Files
-
NEAS.789b8fa3ba6eda4372305c0e73319720.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ