Static task
static1
Behavioral task
behavioral1
Sample
NEAS.e281ef11cdf9b4fd5f51540392487460.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.e281ef11cdf9b4fd5f51540392487460.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.e281ef11cdf9b4fd5f51540392487460.exe
-
Size
66KB
-
MD5
e281ef11cdf9b4fd5f51540392487460
-
SHA1
fa942bf0f366004ab1c6d720810ec0c620f2ffbf
-
SHA256
ccfdcda7776e0eb16d93132d37f68dea52a38e4e7eb848b0b2d39fe9386f8e6a
-
SHA512
fa20875179296a6d3aa1e74910c3ceee29b2069bd96b0feb1b0a566553038f81b1395a3c6daf7cbc3a928830ffd3521d013503a4da935a7f527ccea2ac0a2436
-
SSDEEP
384:tlNiKzDGhbm+T6GmN8dxnEQuJOtRsW2+eqfGkNCKuNlBVT:t1zKhbm+T/mKdCOTsqeCGy+HVT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e281ef11cdf9b4fd5f51540392487460.exe
Files
-
NEAS.e281ef11cdf9b4fd5f51540392487460.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 51KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE