Static task
static1
Behavioral task
behavioral1
Sample
NEAS.e23f64756e86fb7188c61e207643d590.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.e23f64756e86fb7188c61e207643d590.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.e23f64756e86fb7188c61e207643d590.exe
-
Size
528KB
-
MD5
e23f64756e86fb7188c61e207643d590
-
SHA1
f0faf5d4d8e80e7abc90f682e290090416313d57
-
SHA256
4a8615aea4f2e07a792b574cabd22fb7a52416cfaa2f62eb1381cdd90c020074
-
SHA512
a5b8d8842a2a82382976810034effd46d00422ac26173cd52e9a401c976bd47ca60f0ab12b52e269564a5327322071e8bdff7a85a81a5e81dde19e6559c04b42
-
SSDEEP
3072:YGx3z2Q9jvK0hjKkQDyPLwPUc30x0etbB0xzPMMMMMMM75:pxv9jvK0J6yOd3YbsMMMMMMM75
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e23f64756e86fb7188c61e207643d590.exe
Files
-
NEAS.e23f64756e86fb7188c61e207643d590.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ