Static task
static1
Behavioral task
behavioral1
Sample
NEAS.b2278058ca71939d089c5b3a1b3107c0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.b2278058ca71939d089c5b3a1b3107c0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.b2278058ca71939d089c5b3a1b3107c0.exe
-
Size
14KB
-
MD5
b2278058ca71939d089c5b3a1b3107c0
-
SHA1
8047edf710fc736a900ab34f17a1156b7929cbd4
-
SHA256
fa2ee79f1cdde27d57743b35a0f1c65188f14336269f52234d4ef5a9a5686c73
-
SHA512
086c05b7e69b7f2e1c023808b69c1a19ad748ab8291d02d86fda357c746faff8cfbb66f79480bf762160ad55839edb094e4cecdd6a90699c5fe4519c3646b748
-
SSDEEP
384:ldG4BlVhHhbhXiC+v9r9BsfDE045HLUFUFUFUF:ldNBl7BbhyZvlwrApUFUFUFUF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b2278058ca71939d089c5b3a1b3107c0.exe
Files
-
NEAS.b2278058ca71939d089c5b3a1b3107c0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ