Static task
static1
Behavioral task
behavioral1
Sample
NEAS.b5e0ba44539c029bd6cdde50efc2ca60.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.b5e0ba44539c029bd6cdde50efc2ca60.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.b5e0ba44539c029bd6cdde50efc2ca60.exe
-
Size
10KB
-
MD5
b5e0ba44539c029bd6cdde50efc2ca60
-
SHA1
5ce0c240edcebc809087feda75e962d86652bf88
-
SHA256
ca4c3bd2908141dc2df374213dc69f0e6d2e739502a0df3f0a4085896981d04b
-
SHA512
c671066ebd366557445c8212f61c7a5a34f47e16d50e7c14d9c3eeb15106739b0e9b68ea04ed441e889467a69d0c17031400cdaddc52063c6a436777ea4c6955
-
SSDEEP
192:ymp/WbTEkqoZmAnloYk4QnLTWeYve0UZ:ypU4K4QnLTtik
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b5e0ba44539c029bd6cdde50efc2ca60.exe
Files
-
NEAS.b5e0ba44539c029bd6cdde50efc2ca60.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ