Static task
static1
Behavioral task
behavioral1
Sample
NEAS.00b8b1578e872a8f914b8799f6f32c20.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.00b8b1578e872a8f914b8799f6f32c20.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.00b8b1578e872a8f914b8799f6f32c20.exe
-
Size
8.4MB
-
MD5
00b8b1578e872a8f914b8799f6f32c20
-
SHA1
1705be6369b91ba82d047c8c70ba2a2818552a46
-
SHA256
1c5b48543d759592dd236e0e74e8fa685e960412ce73575c170ac8cf76b0b7a0
-
SHA512
f58f24be5fbe43bb546b485a6618b63c9da0e7fdf3a45212e5b194d956f8556d025ff9669b7da529028b33c46473aafee2c2d5a2b525291e317003841d0ff990
-
SSDEEP
196608:gom7Nm7om7Nm7om7hm7om7Nm7om7Nm7om7Nm7om7Nm7om7Nm7om7Om7om7Nm7omV:d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.00b8b1578e872a8f914b8799f6f32c20.exe
Files
-
NEAS.00b8b1578e872a8f914b8799f6f32c20.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 104KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ