Static task
static1
Behavioral task
behavioral1
Sample
NEAS.e1cc2384f0bf521f535123cdfbafd780.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.e1cc2384f0bf521f535123cdfbafd780.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.e1cc2384f0bf521f535123cdfbafd780.exe
-
Size
349KB
-
MD5
e1cc2384f0bf521f535123cdfbafd780
-
SHA1
1b6e9ac5f1ecd1b4c457d31ce283c39309a1ab82
-
SHA256
c739e645116c5d7c523fa4566de33d09922277ec42aa7a3fd63f668e27a0d87c
-
SHA512
ab56110a4267563f76c01ece19efcb91a372c21414876d1a10191a862f3a5a9d2e4d29aa8f2991d98b3bc42837785b664d103b79fa882a886207d9a4d7945fd9
-
SSDEEP
6144:rqppuGRYx4H712f/SBTpzZA6rXD40b+7TJ21WVJ:rqpNtb1YIp9AI4F21WVJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e1cc2384f0bf521f535123cdfbafd780.exe
Files
-
NEAS.e1cc2384f0bf521f535123cdfbafd780.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
NDltoTPW Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tJrdyPER Size: 177KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE