Static task
static1
Behavioral task
behavioral1
Sample
NEAS.baaa5aebf1453e0da38d4cc7d29e1b10.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.baaa5aebf1453e0da38d4cc7d29e1b10.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.baaa5aebf1453e0da38d4cc7d29e1b10.exe
-
Size
48KB
-
MD5
baaa5aebf1453e0da38d4cc7d29e1b10
-
SHA1
671cfe9bbf11dd419bd8839123f54c31874f71d0
-
SHA256
6578068e429c2106b8acb4c9960c89b5b73230967ca31763744b037c0773641c
-
SHA512
847585923298c2839b9252d718c539b60e8615b91c6c2413007cdc097ed55a56e6fc322b012af511db8a58b1eefc4546404449df96442c6f060b9c9b00c13a48
-
SSDEEP
768:y6AC07ofW5H9T8iw17D7JjjqvH7XrV2ubFRDJ+fNM:50qqT8ztJ0rMubFRV+a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.baaa5aebf1453e0da38d4cc7d29e1b10.exe
Files
-
NEAS.baaa5aebf1453e0da38d4cc7d29e1b10.exe.exe windows:5 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 14KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE