Static task
static1
Behavioral task
behavioral1
Sample
NEAS.c8571570b2af0764cb03ca967ad820e0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.c8571570b2af0764cb03ca967ad820e0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.c8571570b2af0764cb03ca967ad820e0.exe
-
Size
21KB
-
MD5
c8571570b2af0764cb03ca967ad820e0
-
SHA1
5ac0c0ad6964a1af34ad375c4da9153756d6e1c2
-
SHA256
8db6e556266d6b3f6c8fcfbb12588d2a9d5c26c6ad77860fa34ae361300144ab
-
SHA512
d8f5b8c6e1ae0414fb586d5196ceb132d2b04083c43776aa680bde2d87752b681c8b136d307d2ba1e6227ba491cd5cc578b55d5d953c710c434f2fee1d6f982a
-
SSDEEP
384:bbQ+n3LntdA0PsZDpNx6pIpfjk8zUnZxhmDblVIRQCJogvY8UJydh:HQ+bntdUZD16pof4mulmDblVAQ4ogDjD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c8571570b2af0764cb03ca967ad820e0.exe
Files
-
NEAS.c8571570b2af0764cb03ca967ad820e0.exe.exe windows:4 windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 13KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE