Static task
static1
Behavioral task
behavioral1
Sample
NEAS.67ce145e0631e487afe710925187afd0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.67ce145e0631e487afe710925187afd0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.67ce145e0631e487afe710925187afd0.exe
-
Size
156KB
-
MD5
67ce145e0631e487afe710925187afd0
-
SHA1
d341b3f4c078bd4b334bff49dc35c430f1a6334c
-
SHA256
6c16e9451fdea28c484ad081ed82eac2d20b327a0a430f79f996fcb8e0ff1fbc
-
SHA512
0d1bc8e30166e01758dc755c77e1e0572ff7b4a01aa08c8c80b4f31f0195b74a3c4860a8700228efc03c142760e803d5aa9e52d111675bcb76a41222f0260482
-
SSDEEP
3072:AtwizQTj8CSUYf8W3nSjen++Bj88OZS0/Qe2HdOylqwvteD2i1E:Auj8NDF3OR9/Qe2HdJf4S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.67ce145e0631e487afe710925187afd0.exe
Files
-
NEAS.67ce145e0631e487afe710925187afd0.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 91KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ