Static task
static1
Behavioral task
behavioral1
Sample
NEAS.98e4e1ae7714c7e4fdeee71d29a9e8e0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.98e4e1ae7714c7e4fdeee71d29a9e8e0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.98e4e1ae7714c7e4fdeee71d29a9e8e0.exe
-
Size
357KB
-
MD5
98e4e1ae7714c7e4fdeee71d29a9e8e0
-
SHA1
a9241797301f86b0eeb09a048dabc25967421c9d
-
SHA256
24520a9e11ea9a0d8416dc13fc347974f14e2c381a775e3091d1bf32a3506c39
-
SHA512
af5006d2c8cc030736aff24e49dbad7d364aeab1ebe20dce1772d9807140b87dced734b58880ed100df8437d0c8939565d5c9632804bdd0b2740bda63f2bce47
-
SSDEEP
6144:dY2ma3Cl6/6SHCHv7GguXy1lDrNlYazjDxcwsTFiwKKWJwsQ8/SCaOMSkmqvJkY6:dY2may0/6ICC3y1lDDYazXnsxiwKdJwa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.98e4e1ae7714c7e4fdeee71d29a9e8e0.exe
Files
-
NEAS.98e4e1ae7714c7e4fdeee71d29a9e8e0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
12345 Size: 255KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 90KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�E�� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���� Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���� Size: 30B - Virtual size: 30B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���� Size: 31B - Virtual size: 31B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 510B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1024B - Virtual size: 1023B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1024B - Virtual size: 989B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE