Static task
static1
Behavioral task
behavioral1
Sample
NEAS.ce52dd9be60d54fd6954786c269d4360.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.ce52dd9be60d54fd6954786c269d4360.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.ce52dd9be60d54fd6954786c269d4360.exe
-
Size
235KB
-
MD5
ce52dd9be60d54fd6954786c269d4360
-
SHA1
bc3e9eca17b34698307155f1487f2271275f24a9
-
SHA256
67c2b98f75ff0e440ce913c86df6db5340b3705b42fee07a398196f9c90f6095
-
SHA512
e18f7d87f3fed90ef76eee52ab7c93bcea45b9d9062d1f25d52a571757dc80da3427c5c463ad778b40972797fe2756a162bf09c581690416c3b0d4c96c9cd8c5
-
SSDEEP
3072:GQ9eUbnr2w7IoANkLTgdiHOVMgu+tAcrbFAJc+RsUi1aVDkOvhJjvJ4vnZy7L5AI:/YgKeLTgQulrtMsQB+vn87L5A5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.ce52dd9be60d54fd6954786c269d4360.exe
Files
-
NEAS.ce52dd9be60d54fd6954786c269d4360.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ