Static task
static1
Behavioral task
behavioral1
Sample
NEAS.be1fba34358439477db17b8bd5f346f0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.be1fba34358439477db17b8bd5f346f0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.be1fba34358439477db17b8bd5f346f0.exe
-
Size
79KB
-
MD5
be1fba34358439477db17b8bd5f346f0
-
SHA1
45cb9fab51f1776e7376b1148aacf6887b671d24
-
SHA256
8cbb32b5acfc8edf098ebb9e659dabd469a21e548324a11f706702dc6a6cc289
-
SHA512
1b7f2d17c09b62cb319a5a66f759228d7591f17dcad907129c4b04d9157e06b13457f25051a65212457f7987e96f6a60300dad5bb45c80f76eb80250c8265077
-
SSDEEP
1536:SbGIs9/WzSYYJFx8fMgOKinRqam+jIlAutrxUQ/gS:SjIWG5PxQbn/f+jgAuGhS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.be1fba34358439477db17b8bd5f346f0.exe
Files
-
NEAS.be1fba34358439477db17b8bd5f346f0.exe.exe windows:26116 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
U��� ��� Size: 4093.2MB - Virtual size: 1790.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
USY�� Size: 768.1MB - Virtual size: 1536.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE