Static task
static1
Behavioral task
behavioral1
Sample
NEAS.c2b95281db20a63965269ae0c5e89190.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.c2b95281db20a63965269ae0c5e89190.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.c2b95281db20a63965269ae0c5e89190.exe
-
Size
14KB
-
MD5
c2b95281db20a63965269ae0c5e89190
-
SHA1
a96cba65c589c1d867c7ffdab0b520adb724753f
-
SHA256
2acd3c9983a77c8d5ed01b03382f03dee185240c73a82391caf4333dca07312d
-
SHA512
53cb2492e48e70649817e6bb0d0e5ced02ced0e3ba1fc2f95d331f224fd07d443b36f00069a04a1e504edae59106953e1a500fe3247a8234a912d0528936e08d
-
SSDEEP
384:DzLAYVt5UcNjMllllllllllllllRzmS2DE045H:Dz3LUAjiGA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c2b95281db20a63965269ae0c5e89190.exe
Files
-
NEAS.c2b95281db20a63965269ae0c5e89190.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ