Static task
static1
Behavioral task
behavioral1
Sample
NEAS.32eb6797b7ae44dd7d2ba5c357884d30.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.32eb6797b7ae44dd7d2ba5c357884d30.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.32eb6797b7ae44dd7d2ba5c357884d30.exe
-
Size
14KB
-
MD5
32eb6797b7ae44dd7d2ba5c357884d30
-
SHA1
bce6ac3bb6cca66d902aab974ef7c4a88dfe8a74
-
SHA256
543f8cb5a8403e75c696535bf49cff80e98388a4881c1f2106d2e3c20cb166ba
-
SHA512
7d733e13e6a5f93a17b4b637c5af0ce1d81ecefeef3ecfe556b73c33a7bbbdc13a001943009239088590c907aecef3edcbdea5200c92e28e648d1820fa66ff5c
-
SSDEEP
384:Ht0YTrE7f3Q36+Btdl1Z1AkC3InDE045H:HuYTrE7fV+ZLjCYDA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.32eb6797b7ae44dd7d2ba5c357884d30.exe
Files
-
NEAS.32eb6797b7ae44dd7d2ba5c357884d30.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ