Static task
static1
Behavioral task
behavioral1
Sample
NEAS.1cf23f1a8d357c5e5466acdb7ed4dca0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.1cf23f1a8d357c5e5466acdb7ed4dca0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.1cf23f1a8d357c5e5466acdb7ed4dca0.exe
-
Size
32KB
-
MD5
1cf23f1a8d357c5e5466acdb7ed4dca0
-
SHA1
ac7db1ace1a395b4eb815ff51f83349da9d97ae6
-
SHA256
7111f7cdfe1b2b426fd0d98360f19b581896dde6f77997abaf6fededba0c420d
-
SHA512
189d5168d41c2e1f4e1ff11faab3119e10f4715ac1e9a1ffe171a28033c63a79803a831be84afe6998821920d7dcdd07918cd63bd3beb7c300b1d8c1447f27fb
-
SSDEEP
384:vnyhSksAVndb4G3w2NMsG9OqvhyY3Q6oVxYv0Dq6ULdAeMB:KhSksandb4GgyMsp4hyYtoVxYUZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource NEAS.1cf23f1a8d357c5e5466acdb7ed4dca0.exe
Files
-
NEAS.1cf23f1a8d357c5e5466acdb7ed4dca0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ