Static task
static1
Behavioral task
behavioral1
Sample
NEAS.b2afa27c97083e5223b9910c27990e60.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.b2afa27c97083e5223b9910c27990e60.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.b2afa27c97083e5223b9910c27990e60.exe
-
Size
2.5MB
-
MD5
b2afa27c97083e5223b9910c27990e60
-
SHA1
b7dcaba5e47f2a9a01e527fec8d44ff83527f325
-
SHA256
f9c846886c77669c7d18363f2c2844832748acafc363199629066bcd526fb75a
-
SHA512
20a318626c8abf3b71b64babb2cd5f4c688530fcaf168abe2cb46da06940e2e1c2d5174ef5dedbb501bb04eb8be8a882bfb39aa15043c45b7364bfba5fbaae7d
-
SSDEEP
49152:z5gaX0EKTZaqdwk0c0undqqVG8WqwSEHbeaAxUf2QEr+xMvm1qN8UndU:z5ZX7KYqdwkLdlVG/BL7IdLm1qP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b2afa27c97083e5223b9910c27990e60.exe
Files
-
NEAS.b2afa27c97083e5223b9910c27990e60.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 480KB - Virtual size: 479KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 956KB - Virtual size: 952KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 176KB - Virtual size: 174KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ