Static task
static1
Behavioral task
behavioral1
Sample
NEAS.48b4cb7589e184fcf8b4062e5797f6c0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.48b4cb7589e184fcf8b4062e5797f6c0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.48b4cb7589e184fcf8b4062e5797f6c0.exe
-
Size
14KB
-
MD5
48b4cb7589e184fcf8b4062e5797f6c0
-
SHA1
fe6b330286e6aec77a293e34f08b30e3e0f8fd5f
-
SHA256
713ee63bdbd12c2faf59cfaad481c8bb2de153f07db87bf9ad7a777353568d21
-
SHA512
8b8bfdac94c417fdd04e4b7eca45627c96c70dea3e56103e29a9892bad7a6471f36bead612416b8ba9571b8249bd0cc3e01932ea2c5d2d2abd7478970ec19abf
-
SSDEEP
384:eawohcjvMj7slkbeQT3OtlT9pf60CWsUDE045H7K+K+K+K+:eawodUlkbe+3O9o0NsuA1tttt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.48b4cb7589e184fcf8b4062e5797f6c0.exe
Files
-
NEAS.48b4cb7589e184fcf8b4062e5797f6c0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ