Static task
static1
Behavioral task
behavioral1
Sample
NEAS.6a8d7b3f7c4b4357e2b2ab97d0691970.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.6a8d7b3f7c4b4357e2b2ab97d0691970.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.6a8d7b3f7c4b4357e2b2ab97d0691970.exe
-
Size
14KB
-
MD5
6a8d7b3f7c4b4357e2b2ab97d0691970
-
SHA1
3a73ef0f8db4196d68773ed7c0a38118a8e8cbbc
-
SHA256
cecd312a437d8c19d41657abe84ff161be1154277a19e2111b736e562a1241c8
-
SHA512
a7787d605f2f3221c0d5a3b10bcadf55c9edb452cd06f1cc08819a56d956dd21422263aa68c2b0d29008d535fe2c3a20d91568ab78335a25025a85430cb3516e
-
SSDEEP
192:9z3TUArYFHZUDDo2GRwvvvvvvvvvvvvlvIBFJ9qoGMWsqDE045HQ:9XKNIFtvvvvvvvvvvvvl0pp6DE045H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.6a8d7b3f7c4b4357e2b2ab97d0691970.exe
Files
-
NEAS.6a8d7b3f7c4b4357e2b2ab97d0691970.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ