Static task
static1
Behavioral task
behavioral1
Sample
NEAS.5e663f8384fa3e95edb21c504c80a810.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.5e663f8384fa3e95edb21c504c80a810.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.5e663f8384fa3e95edb21c504c80a810.exe
-
Size
732KB
-
MD5
5e663f8384fa3e95edb21c504c80a810
-
SHA1
1b163c9951a0ede6cc799fb86d78fa528af39988
-
SHA256
f13a742aa5cdbb0ed2d0202186e2a424801b74280fe70da1844971682f509407
-
SHA512
8fea6a0b1965c97919cdd4e5346ec107e809001084e05d3787a79b31bf11507150670ed5ff7fc8cc305da1d93d12ce1a438d6e65f37fdc72b3313921ef22ec4c
-
SSDEEP
12288:zJMxy+7S7p8yuL4RuKEpKp1w+xEIpUm6CIsh1L0gp0hDmDPleFz:z2wTeLOT6Krw+2KeCI+1L0geIDK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.5e663f8384fa3e95edb21c504c80a810.exe
Files
-
NEAS.5e663f8384fa3e95edb21c504c80a810.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ