Static task
static1
Behavioral task
behavioral1
Sample
NEAS.caa4da71165b1fe6babc2b8ab2a0b200.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.caa4da71165b1fe6babc2b8ab2a0b200.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.caa4da71165b1fe6babc2b8ab2a0b200.exe
-
Size
84KB
-
MD5
caa4da71165b1fe6babc2b8ab2a0b200
-
SHA1
3bfe51e00881a6b38883f1744ac58f639d19183e
-
SHA256
cfb0e7dce43ebf5c218b7666435d10f58eda42220eb29b225c36c12e461f5885
-
SHA512
0a0d3e5462ad6c1aac4ae62fd4c7d0e574c3058724d1408a6bffcc41c6ceb61a827f79d60301e774d26d19ee2acd6545497434a20663de1507d6f1ef29bd4625
-
SSDEEP
768:9tPuTL8X3tH0RrWeC2sd5KdqtuUbDyyl+LDZMtkpNj7MTE47OEP1dPR4FQkn66l9:jM8NHOyeId5oxHgwwdP2xRa55N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.caa4da71165b1fe6babc2b8ab2a0b200.exe
Files
-
NEAS.caa4da71165b1fe6babc2b8ab2a0b200.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE