Static task
static1
Behavioral task
behavioral1
Sample
NEAS.c4f82e05b4e060a3d7446863e7a32b70.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.c4f82e05b4e060a3d7446863e7a32b70.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.c4f82e05b4e060a3d7446863e7a32b70.exe
-
Size
1.8MB
-
MD5
c4f82e05b4e060a3d7446863e7a32b70
-
SHA1
545f0ff04a0ff7c007ada981bd2b5b21075fe5ae
-
SHA256
4e397711116982eae8479a4be2d4a26ce61cc3dd945bbf15245e06a874fd663f
-
SHA512
417a9f1df8cb3769dc4dec1e577bd8a2ed833d7be021dcc5a789efc6f286108c044b66c0594f1844e088a676b95004b2bbd9ce6092cb7b7831a90a1b2e7f8c64
-
SSDEEP
49152:V7iQak5DoTQxlnIXy0CxHCmcnO3t1Jidk8UQc:opk5MEfFCmc+Dw4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c4f82e05b4e060a3d7446863e7a32b70.exe
Files
-
NEAS.c4f82e05b4e060a3d7446863e7a32b70.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE