Static task
static1
Behavioral task
behavioral1
Sample
NEAS.bf195af3e9722e3fc77a80599900ecb0.exe
Resource
win7-20230831-en
General
-
Target
NEAS.bf195af3e9722e3fc77a80599900ecb0.exe
-
Size
70KB
-
MD5
bf195af3e9722e3fc77a80599900ecb0
-
SHA1
ed4898f24a55c2c50e02cf94fb6db95cce7aa678
-
SHA256
8b3d44ffc05cd3062303d5f78edc46fc8c0a637432d368db4875d69faee7afb5
-
SHA512
db40778d0cd8f3e2599cddb9c4c524eb895ba33a76053b93636cd711809e020bae20aeb45ab8f8b7f983a46fe956d4dbfc099a0340986af5858d2f115823cd90
-
SSDEEP
1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND+3T4+C2iJvc4U:ymb3NkkiQ3mdBjF+3TU2iBc4U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.bf195af3e9722e3fc77a80599900ecb0.exe
Files
-
NEAS.bf195af3e9722e3fc77a80599900ecb0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 274B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ