Static task
static1
Behavioral task
behavioral1
Sample
NEAS.f85da5cec98549a3e92bcd0685e4be90.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.f85da5cec98549a3e92bcd0685e4be90.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.f85da5cec98549a3e92bcd0685e4be90.exe
-
Size
93KB
-
MD5
f85da5cec98549a3e92bcd0685e4be90
-
SHA1
d37c6d8ec7637653bfc19d1cae90d5428dc94365
-
SHA256
2b284560d80fde2efbbe7c3ab913107a334e051e33119dba565a1a839897e3bc
-
SHA512
71c01322d4eca9d209cad5f0fd267f679bbbe702ee9e676296693718a2a56575916f244b479120932ac66b5493d50a94a82524f0814855336503b4c6b17f4f59
-
SSDEEP
768:UbNjs/1T6PPqi7DSlhVtQZsQ/TTiZT3OJhihyEX:iNjs/ZlhVtWsQ/T2ZEOX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.f85da5cec98549a3e92bcd0685e4be90.exe
Files
-
NEAS.f85da5cec98549a3e92bcd0685e4be90.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE