Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d49b4a00b4c3608570eb8eefdbe7b4d0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.d49b4a00b4c3608570eb8eefdbe7b4d0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.d49b4a00b4c3608570eb8eefdbe7b4d0.exe
-
Size
14KB
-
MD5
d49b4a00b4c3608570eb8eefdbe7b4d0
-
SHA1
f1680b6c7670861d0a7de0ea5747bee886a48d70
-
SHA256
12210a9c1a8b3e8449bec7ca0dd1e785871e5373f63d7ea3d0fab79b2fbd3d19
-
SHA512
9f774f0a7fd711dd4ab43a657747bbe21504261ac2fee22577e38dfa1d7b29a9aefa478949cafb6317a40dfe4bc55874d3d824506b179874e63cf04f192b8c8a
-
SSDEEP
384:U4nas3zj/btYHdG5555551giiiiiijQ9AMJE6/paDE045HaVVVV:UoPTtYHQ5555551/Cy/qAAVVVV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d49b4a00b4c3608570eb8eefdbe7b4d0.exe
Files
-
NEAS.d49b4a00b4c3608570eb8eefdbe7b4d0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ