Static task
static1
Behavioral task
behavioral1
Sample
NEAS.ba0f560839a33a18be9304e7721d10f0.exe
Resource
win7-20230831-en
General
-
Target
NEAS.ba0f560839a33a18be9304e7721d10f0.exe
-
Size
3.9MB
-
MD5
ba0f560839a33a18be9304e7721d10f0
-
SHA1
fc4453b41e4d1fe56b8311038767255f667ed77d
-
SHA256
8f05a5fdfaf10190d27fef3d87f17ae8cb83cebed304a0d9d48c067717e3ccf9
-
SHA512
287347c12f55e007a917b45b94b9426e6e7dfc6349ba1a1cd3b78681cfcc24eb953c1579543ef584bec3ca617fea850c90218ef707e0d4a58533802372630845
-
SSDEEP
49152:rquesH/GLTkk7hlLtBhubNo2tkZsbifvo5yJ/tbG8w3U4gg6zKdWBXC+Srcy/SB/:RVG0eLtBhGnssOXIyJA8wGzbLJlX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.ba0f560839a33a18be9304e7721d10f0.exe
Files
-
NEAS.ba0f560839a33a18be9304e7721d10f0.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ