Static task
static1
Behavioral task
behavioral1
Sample
NEAS.a54bf598c750c6dcc5818f1e706675c0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.a54bf598c750c6dcc5818f1e706675c0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.a54bf598c750c6dcc5818f1e706675c0.exe
-
Size
196KB
-
MD5
a54bf598c750c6dcc5818f1e706675c0
-
SHA1
634c61c6b3ae902feb48c863c0f7e0cb0207d12c
-
SHA256
2f98adf1272ed1c30716d506f2d8280f72c2a3a1443d3f6c545ab7d20910b4a7
-
SHA512
0ec7e48779f999de96f4662340405130aad3cd8daa1379441a61aeb828b259a58987b7480f65a96d9ce37bee8813cf8b2d38e7901ef8093449f9a602802c8e56
-
SSDEEP
768:/cv+EQGtmz8coupvmxT90hdpX2mwgnZP+1H+fktVU2ZMAO7y/1H5f:/tctmnouhmxT2haJgF2ZXGw9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.a54bf598c750c6dcc5818f1e706675c0.exe
Files
-
NEAS.a54bf598c750c6dcc5818f1e706675c0.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jfbbql Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ