Static task
static1
Behavioral task
behavioral1
Sample
NEAS.c929f8bbf1a206ce86d659e19cce2070.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.c929f8bbf1a206ce86d659e19cce2070.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.c929f8bbf1a206ce86d659e19cce2070.exe
-
Size
12KB
-
MD5
c929f8bbf1a206ce86d659e19cce2070
-
SHA1
25a36890ab6b57a7bc39d705dc7ef4d32e2fd9d2
-
SHA256
0605ccc7b1b8935a891f7540c82f99700bceeaac188b17b4dbdf50bb101a9f25
-
SHA512
58a345f0809ef62a88a9c0280a4e13bc231ce24bbac885807d05451ad082873fce26bc0e5d320b4634e354c0c4f03273afd85618cc601b796df42472c5eafd51
-
SSDEEP
384:uDfuXMLcb8yc8cXFflgyK5jBM74uSpHpqb8:dpgAMOh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c929f8bbf1a206ce86d659e19cce2070.exe
Files
-
NEAS.c929f8bbf1a206ce86d659e19cce2070.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 339B - Virtual size: 339B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ