Static task
static1
Behavioral task
behavioral1
Sample
NEAS.ceb94cda69c5e27157208d9fff9a9d40.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.ceb94cda69c5e27157208d9fff9a9d40.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.ceb94cda69c5e27157208d9fff9a9d40.exe
-
Size
343KB
-
MD5
ceb94cda69c5e27157208d9fff9a9d40
-
SHA1
284a5277a4567bca9e3f231c91c6cb445f41d7ff
-
SHA256
b4919ff881c789de532dfa1bf3ece92dfb7cf49d1d7ae961dfdaf4cfe68d2659
-
SHA512
deb9e60035ccbbc3a1b5d41ef226e2fa83aa6a66a27533817ecb8a4602283844dbe1bb65ea297aa2f188b0b2e4b7d1dd58ec9e11e4fc70bb2b3e3eeab825879e
-
SSDEEP
6144:S5FrtlrIiswtAyxmbeoYRMHpeW+5GZhgNhHgwNWdVot:SHrtqi3trxg4uHJXZhgNhHg/dc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.ceb94cda69c5e27157208d9fff9a9d40.exe
Files
-
NEAS.ceb94cda69c5e27157208d9fff9a9d40.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE