Static task
static1
Behavioral task
behavioral1
Sample
NEAS.fa8d78fb8d4322d86392268a3bda01f0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.fa8d78fb8d4322d86392268a3bda01f0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.fa8d78fb8d4322d86392268a3bda01f0.exe
-
Size
208KB
-
MD5
fa8d78fb8d4322d86392268a3bda01f0
-
SHA1
fe1cd418a6e9e89126575946eedf5771d1e81bb1
-
SHA256
65f3e984b52150d95b41df53de7e7c72060a10babca66dd9413e87d4c8e653e9
-
SHA512
1802f80c7ee501d041730ef0e2146a5521d52ce1a6580bcdd556692bbe137baec831f51214c073620f344ac9179acb89302b05760f72e40100b14f4bec0645c8
-
SSDEEP
768:npMeEXxR3F8UNvrJb0PztsYDpVLGc3HZWok/6pSyNLk3ynrT/1H5aLXdnh:nqzXF8CvrJ4PBhDP35RNkqh4J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.fa8d78fb8d4322d86392268a3bda01f0.exe
Files
-
NEAS.fa8d78fb8d4322d86392268a3bda01f0.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfcd Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE