Static task
static1
Behavioral task
behavioral1
Sample
NEAS.5ad73e671968d2b95ff358a0f7b4a460.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.5ad73e671968d2b95ff358a0f7b4a460.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.5ad73e671968d2b95ff358a0f7b4a460.exe
-
Size
92KB
-
MD5
5ad73e671968d2b95ff358a0f7b4a460
-
SHA1
80050a0cd032b62592fe9b347361bd3445426173
-
SHA256
c47e992b92b23a2ed879ef5201adbbc3c5c3e980d02e6ddb59cbf96ca077962c
-
SHA512
ed6b16457d2de0e61a874fc3814b3925fb4f6ecaac7e0db3acf459c769c76dbb8bbcf6b7ff9da93bc0703d3e1cab252a8a2c7acccf29cd48ed3b23ae50ebd04e
-
SSDEEP
1536:JsrSRZydcpd6Q1HBqdtxJYGOh4cmB/TA2jW/CUQZXP886bcTOU37H7:CeZyTLAacuE2jRUQJP8eyG7H7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.5ad73e671968d2b95ff358a0f7b4a460.exe
Files
-
NEAS.5ad73e671968d2b95ff358a0f7b4a460.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 91KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ