Static task
static1
Behavioral task
behavioral1
Sample
NEAS.a9d1e7604b8c33a8b32f719544e6d3a0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.a9d1e7604b8c33a8b32f719544e6d3a0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.a9d1e7604b8c33a8b32f719544e6d3a0.exe
-
Size
151KB
-
MD5
a9d1e7604b8c33a8b32f719544e6d3a0
-
SHA1
be46b5c900aad88b546b0b2881530ccb30b10d12
-
SHA256
e4e2580f5e1febd8c319bbb3cbc9226bbcb543d62c4a0ad56a774b1634af8f42
-
SHA512
23551d5fa2092e5aa6a8d31f69827ca069108ac43335f4e4bc586a6a312346af171419437fa492247486633205a09f5ff1c779264d0e3180ad53d8d091873049
-
SSDEEP
3072:oQzrhhx9yuk/4CrNuXsNTTBm5D5LMXqNy:o6fPyH7Nu8BT4lMXqg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.a9d1e7604b8c33a8b32f719544e6d3a0.exe
Files
-
NEAS.a9d1e7604b8c33a8b32f719544e6d3a0.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 144KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE