Static task
static1
Behavioral task
behavioral1
Sample
NEAS.c143cefc98479ad6bc6a33af66eaf700.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.c143cefc98479ad6bc6a33af66eaf700.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.c143cefc98479ad6bc6a33af66eaf700.exe
-
Size
58KB
-
MD5
c143cefc98479ad6bc6a33af66eaf700
-
SHA1
690f6504b092c3035d2c40d5a0aa33bcd34383ee
-
SHA256
5b5d67f54a5e35f36414f562faf69277b1f699f97e5b166cdd95d4075a798c79
-
SHA512
0b1b5e37661ab52b51864d2e0ec61cf812d464bf30790a8ec52c72e9d233504bc2076d37983404b3abe4c933271751d7e8fbb491c380400523cc1d4f7abaa649
-
SSDEEP
768:+lBSZoSa8RKkC1I8zHwOVkzgmncq0QOsafSBxbdAb9Y2ggNLzPzxXPGW6qxLoK/Z:+IiGY63ncq0Q66BjLgNLzPznLiYD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c143cefc98479ad6bc6a33af66eaf700.exe
Files
-
NEAS.c143cefc98479ad6bc6a33af66eaf700.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fldo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ