Static task
static1
Behavioral task
behavioral1
Sample
NEAS.18baefe4f7bbf0d00a63765148c6f1c0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.18baefe4f7bbf0d00a63765148c6f1c0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.18baefe4f7bbf0d00a63765148c6f1c0.exe
-
Size
732KB
-
MD5
18baefe4f7bbf0d00a63765148c6f1c0
-
SHA1
918dbf86cfb0a56be9a538d161b17430f8447365
-
SHA256
75fc943522dd52f3616b075741f3f57e57c6804032ea4c37758a521360378d7a
-
SHA512
60c7842d0bb92d0a0fda3e4d8efa17af4186c756796d6e171cf2e53e85f34d66f6f4f328f67916a7328e44f3880da11e58ebc160d5e88be275aca621f128a562
-
SSDEEP
12288:JtKZDYIwk9XYTGCZ57Hr+K2fOywJKMrOSZZP6yo5IEGpzK6FSkFvD0EhIxIR40qc:JeR7dYae7Hr+uHKsOSZZPN5pzvDixIUc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.18baefe4f7bbf0d00a63765148c6f1c0.exe
Files
-
NEAS.18baefe4f7bbf0d00a63765148c6f1c0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 337KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 386KB - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE