Static task
static1
Behavioral task
behavioral1
Sample
NEAS.bc0679b7c30839d707a8515a2bb02f70.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.bc0679b7c30839d707a8515a2bb02f70.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.bc0679b7c30839d707a8515a2bb02f70.exe
-
Size
353KB
-
MD5
bc0679b7c30839d707a8515a2bb02f70
-
SHA1
70eb68f184aa6e8eb0b119581571707d75cef080
-
SHA256
e1f9ab688b6ace236777e4c640dd363cf6cc9ed072ec55f416f9d7556bba74c7
-
SHA512
d3f08e0df0f256525ff7578e4e425f083df41156537adab257ea1f93a45737a85eb9d54524dcd20ebf50725f5de3ca1c7b14e3a3754b4530dda9b498bbce7779
-
SSDEEP
6144:rqppuGRYx4H712f/SBTpzZA6rXD40b+7TJAV:rqpNtb1YIp9AI4FAV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.bc0679b7c30839d707a8515a2bb02f70.exe
Files
-
NEAS.bc0679b7c30839d707a8515a2bb02f70.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
NDltoTPW Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tJrdyPER Size: 177KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE