Static task
static1
Behavioral task
behavioral1
Sample
NEAS.4996cf61b8f0edaa2057e5bc8330f470.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.4996cf61b8f0edaa2057e5bc8330f470.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.4996cf61b8f0edaa2057e5bc8330f470.exe
-
Size
14KB
-
MD5
4996cf61b8f0edaa2057e5bc8330f470
-
SHA1
5c87a5469b2cb5b5ad5aeab251d476b40522a97a
-
SHA256
55e42d24c23f8139a9592b2bded6f689b16da3d4a5dd2af620b07bfe7f197303
-
SHA512
ef454e109b9ce464082904028df9f896a2e56f45a7bd27236f94106aa1eefafaea4f7653dd47c28d2fdfde702827510aac0dd5ffe525cce4c5f08e29a152c358
-
SSDEEP
192:CIKmMcfrq5a7hP7heQKwvW4KcwJKKKKKKKKKKKKa4wkUGrXdPeMuUL2qDE045HQu:f5hsa717M6eTgUTBeMuUL5DE045HR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.4996cf61b8f0edaa2057e5bc8330f470.exe
Files
-
NEAS.4996cf61b8f0edaa2057e5bc8330f470.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ