Static task
static1
Behavioral task
behavioral1
Sample
NEAS.e27d1479eb007cccdb05ef9f210d90e0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.e27d1479eb007cccdb05ef9f210d90e0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.e27d1479eb007cccdb05ef9f210d90e0.exe
-
Size
334KB
-
MD5
e27d1479eb007cccdb05ef9f210d90e0
-
SHA1
59dff054a558b9c9df7c70d28cf43cc54de27d30
-
SHA256
a66b5e673d3a604a5dfcb2a09b6db4038a8ba1ab7c111c3845635e9f7eb91ba8
-
SHA512
a5e8e7ef2daad466d2ff4a26a5a03965a22fa82404e1d220418a76cf36ad65075053efb3f319e6584decaf47cf0797e47e5e75b5184fe6b3929e759db75d5edc
-
SSDEEP
6144:nuq1yykWI7+E+89H4IRnB0zdT7UhUi+r3WcYM4Ux3PtV0icUC5bXUxbmk:/1ygI7l+u9X0UaC/MrplpcJERmk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e27d1479eb007cccdb05ef9f210d90e0.exe
Files
-
NEAS.e27d1479eb007cccdb05ef9f210d90e0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ