Static task
static1
Behavioral task
behavioral1
Sample
NEAS.9e4b78e5e637ece139e6d1cec6ef3cd0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.9e4b78e5e637ece139e6d1cec6ef3cd0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.9e4b78e5e637ece139e6d1cec6ef3cd0.exe
-
Size
310KB
-
MD5
9e4b78e5e637ece139e6d1cec6ef3cd0
-
SHA1
482907f1064cb5636f0fbf1eff879019aa666d48
-
SHA256
9efc856ea9665ae21feac530e2b5b38632a8b800aeb33c11f1715f852b87f805
-
SHA512
c2c07e70d7e94f33bf41a93d6a3e0c8379a3b3a6a664259b766896e0a22e2893ba4f3dec2940c94727daf38a688072990e3a740f994c05cae44a7fa5e1a89d53
-
SSDEEP
6144:lXg1tRJQUUejLUdU7tOloTGqmUIvD87n4bsi/Nuy4DErnCVyXj/veugVz9:lXgDLUejLUdUJWoTGV/A7n4gMuICwz/s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.9e4b78e5e637ece139e6d1cec6ef3cd0.exe
Files
-
NEAS.9e4b78e5e637ece139e6d1cec6ef3cd0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 309KB - Virtual size: 312KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE