Static task
static1
Behavioral task
behavioral1
Sample
NEAS.f3ca65dbd48289eeee219cc70e3c2f20.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.f3ca65dbd48289eeee219cc70e3c2f20.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.f3ca65dbd48289eeee219cc70e3c2f20.exe
-
Size
287KB
-
MD5
f3ca65dbd48289eeee219cc70e3c2f20
-
SHA1
c1cff3e05d4872a771b010dce5551186955ee5dd
-
SHA256
986ac8344d15cc48ba2add948a71d13159b8bcd442c2a9382f8f9f524b1b884a
-
SHA512
05730b56e66bf991b9fbdbcbb9d20d5d33266befef8fefb5352c7b6997dc568c4392a30ad542ec67bfb04381792c854181977fe0cbc2683f772697b07bf908d8
-
SSDEEP
3072:wcWOtpBCtBXRvjxCb5NgXDY7uSlkJcUa7kYQTcqW2NdQQGH/UDhSCUc4aqTB3RDn:VWxlKgzelZNQSBQGH/CSpWqTf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.f3ca65dbd48289eeee219cc70e3c2f20.exe
Files
-
NEAS.f3ca65dbd48289eeee219cc70e3c2f20.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 236KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE