Static task
static1
Behavioral task
behavioral1
Sample
NEAS.e281159e02e6bdb605de499f4d6f8280.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.e281159e02e6bdb605de499f4d6f8280.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.e281159e02e6bdb605de499f4d6f8280.exe
-
Size
14KB
-
MD5
e281159e02e6bdb605de499f4d6f8280
-
SHA1
3deea88dc41a8e45b03864a042249b58122d5e91
-
SHA256
089725138aa98cda6809eea27bac95499ba233f929c4243755ff61c5395c6bdc
-
SHA512
b94c00846d01708df28b14ba7cc59f3c22adf0f53339789200d4348934bcd72fb8ce22a03afe11841b6d541938711f37776e391673864705755ff1aa89c81f02
-
SSDEEP
384:88M9LSO+xV74TvdWYaaaaaaaas/s1+oODE045HdDDDD:88MF+xAAYaaaaaaaas/GkAbDDDD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e281159e02e6bdb605de499f4d6f8280.exe
Files
-
NEAS.e281159e02e6bdb605de499f4d6f8280.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ