Static task
static1
Behavioral task
behavioral1
Sample
NEAS.c79e8174841f5ab3df6f6b9e2a86b8f0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.c79e8174841f5ab3df6f6b9e2a86b8f0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.c79e8174841f5ab3df6f6b9e2a86b8f0.exe
-
Size
607KB
-
MD5
c79e8174841f5ab3df6f6b9e2a86b8f0
-
SHA1
906a8bb4cc50822963c3fe903e2cd7a76d58c328
-
SHA256
811ff7e8ad1c67412939257b93af2886ee6c801a40e4d99ec4f1e8c59f550497
-
SHA512
b20849563f68b2da1773ad278f83e9180e4fa43013eea8111f749b5b681680c34883807562633e6ac04ca6f40a3494c855ea86d74f6facfbd4075595365c50d5
-
SSDEEP
12288:zJMxy+7SM0ZWxevPMeRSau5QKJu9G+N+r8xhzmQ4mFyFCv71R87xq8gF:z2wTMcMn3hJx+TqQ4CyFI7owRF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c79e8174841f5ab3df6f6b9e2a86b8f0.exe
Files
-
NEAS.c79e8174841f5ab3df6f6b9e2a86b8f0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ