Static task
static1
Behavioral task
behavioral1
Sample
NEAS.2cb1864715302e2cbc00cc4d2d8de100.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.2cb1864715302e2cbc00cc4d2d8de100.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.2cb1864715302e2cbc00cc4d2d8de100.exe
-
Size
574KB
-
MD5
2cb1864715302e2cbc00cc4d2d8de100
-
SHA1
8c5c1732fd4550cc24d12a05a23980851037d8ac
-
SHA256
25ba1fb22a5c3b881ded96fc021a4543a92c548a8dcf33fc57702311b7296756
-
SHA512
9681dcb9f7cd2085b7706be6773432b07db63fe49b490060ad258d2c7bfbbade03a096e5719e3a0052ab5955533fa52dc60f2649627d9a9a1cc7fe36afe8a5a1
-
SSDEEP
12288:zJMxy+7SM0ZWxevPMeRSau5QKJu9rAVsd6I+mHfNnCmeDg2n5hFFo:z2wTMcMn3hJRDI/T8C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.2cb1864715302e2cbc00cc4d2d8de100.exe
Files
-
NEAS.2cb1864715302e2cbc00cc4d2d8de100.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ