Static task
static1
Behavioral task
behavioral1
Sample
NEAS.418ab5a6c291f718ceeeca19e24d8e00.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.418ab5a6c291f718ceeeca19e24d8e00.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.418ab5a6c291f718ceeeca19e24d8e00.exe
-
Size
457KB
-
MD5
418ab5a6c291f718ceeeca19e24d8e00
-
SHA1
bc6c7f77e59733b46a637fa535a5b5703042d70d
-
SHA256
ef942331bea1de8c65e99f476ef216bb747ab3a63d033e0e69b3e45b8dc048b1
-
SHA512
9ff76360dd7d5660a296f2fb41a4c2dc6d8be4b6fd165d96e435c08d61fbcecf92c4ae2aa3d4ef843f059030dfa04c5fac64ce527ae2d6ea9d3350d6d3819d23
-
SSDEEP
6144:gY+32WWluqvHpVmXWEjFJRWci+WUd20rUU5EYCTvaBju4z4:jnWwvHpVmXpjJIUd2cUusvalxz4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.418ab5a6c291f718ceeeca19e24d8e00.exe
Files
-
NEAS.418ab5a6c291f718ceeeca19e24d8e00.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 442KB - Virtual size: 456KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE