Static task
static1
Behavioral task
behavioral1
Sample
NEAS.be5ea4ed7e17631556d95617d5ff16d0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.be5ea4ed7e17631556d95617d5ff16d0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.be5ea4ed7e17631556d95617d5ff16d0.exe
-
Size
14KB
-
MD5
be5ea4ed7e17631556d95617d5ff16d0
-
SHA1
4a1f4268abbd03e15467848ba7b74e54440c58fd
-
SHA256
2c316e42cca7f172960d2e4d4a3e1b74e967a08b12d0447b47ed3c877a9e77ac
-
SHA512
0d936aac6d650adad6538b4cd0622424d3f0cdf590dd309d2c33ec92f4c4bd545e48d6922f7341b826f52b4439af66458e6384059173270aec5357a06c6760cb
-
SSDEEP
384:+tqaERmiSqduc4uPnhhhhhhhhhhhhhh9sCsX4RDE045H:XaGmCjnhhhhhhhhhhhhhhLRhA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.be5ea4ed7e17631556d95617d5ff16d0.exe
Files
-
NEAS.be5ea4ed7e17631556d95617d5ff16d0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ