Static task
static1
Behavioral task
behavioral1
Sample
NEAS.4eed0889ec503c07316f390c3925a830.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.4eed0889ec503c07316f390c3925a830.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.4eed0889ec503c07316f390c3925a830.exe
-
Size
144KB
-
MD5
4eed0889ec503c07316f390c3925a830
-
SHA1
932686559c8724256a4f2b92b2dd24343eba2f9d
-
SHA256
2230b0f131fc9f57756ebbe1dfbb4f919ac7af28d774a6337aff0f3fb8263752
-
SHA512
51a4ac9b7c91afc159076aea368ad07fb6b65e238510f2f4588cfe45fb4b92faddd4d29a86e6b556c6f4812147c034996a7752938639167e3c5b0968e76b5b13
-
SSDEEP
3072:Bx6AHjYzaFXg+w17jsgS/jHagQg18rhxidV:BxzYzaFXi17jJrw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.4eed0889ec503c07316f390c3925a830.exe
Files
-
NEAS.4eed0889ec503c07316f390c3925a830.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rsrc Size: 39KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.pdata Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE