Static task
static1
Behavioral task
behavioral1
Sample
NEAS.15eefe4f44b06cc29cfafeb393356270.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.15eefe4f44b06cc29cfafeb393356270.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.15eefe4f44b06cc29cfafeb393356270.exe
-
Size
518KB
-
MD5
15eefe4f44b06cc29cfafeb393356270
-
SHA1
5ca3a3662c9b05d8b9cf6e2912ae71f3f96eff02
-
SHA256
58fbc430a36ba26d1ae299d4aedd3bf0f1d28f64ea73864b85927f31c5c636de
-
SHA512
056c8f5df76c57304a29a415d55bd7bc4659129bbda4a97617aa3e9e481af6ca6081e48c857387a526d5509302b4072918445c9567ce37408e36e9b1cf9eab80
-
SSDEEP
12288:or3kd8FDJFWGK8rtgvBvJ0NmLW5KCGSbG/3C1:ikKhY0NJb2C1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.15eefe4f44b06cc29cfafeb393356270.exe
Files
-
NEAS.15eefe4f44b06cc29cfafeb393356270.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.reloc Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE