Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d5edd0caa8a67b79051bb0c8c5bad050.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.d5edd0caa8a67b79051bb0c8c5bad050.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.d5edd0caa8a67b79051bb0c8c5bad050.exe
-
Size
14KB
-
MD5
d5edd0caa8a67b79051bb0c8c5bad050
-
SHA1
aa1313c69c52242551d412dba85d379e9f676708
-
SHA256
32fcf1c669db24a3bad3f221526e87f7fbc44ffaa2b79bd53fda6bc2f1a5ec5a
-
SHA512
8dbe38bd9f5b79f147270a2dd44e79407cbe8d92ea71cce54ce8928d04942d656fdba846a15c20b43744bea6dbbbe15ee8cf96b89baf76935c63d0c8c6301602
-
SSDEEP
384:QoqM1C5oonoUgKKKKKKK49NCVcR9QDE045HgVuVuVuV:FqM0IKKKKKKK49NCCTqAEQQQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d5edd0caa8a67b79051bb0c8c5bad050.exe
Files
-
NEAS.d5edd0caa8a67b79051bb0c8c5bad050.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ