Static task
static1
Behavioral task
behavioral1
Sample
NEAS.fd13a683e6d22c5b8be59e9c44b71b00.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.fd13a683e6d22c5b8be59e9c44b71b00.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.fd13a683e6d22c5b8be59e9c44b71b00.exe
-
Size
124KB
-
MD5
fd13a683e6d22c5b8be59e9c44b71b00
-
SHA1
4f8ac606f6707ff19e2417074d2cd1f7c95d6b83
-
SHA256
112d98ebb1d6925f6dae77078c8d3990a4cdf71eebecfb979580515460c56fc7
-
SHA512
3907dbe5ce6fb904d8d75499d655bada410722177018a1d9a92ebabce442fc7748720e068d573e05bd3d13b0c86f3f88925053dee24117065afc1e4225d4811b
-
SSDEEP
3072:eq5JOjWuyt0ZsqsXOKofHfHTXQLzgvnzHPowYbvrjD/L7QPbg/Dr0T3rnXLHf7z0:eq5JIs9OKofHfHTXQLzgvnzHPowYbvrr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.fd13a683e6d22c5b8be59e9c44b71b00.exe
Files
-
NEAS.fd13a683e6d22c5b8be59e9c44b71b00.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
2999khtu Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
30w2gbfg Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
e799kvge Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE