Static task
static1
Behavioral task
behavioral1
Sample
NEAS.eebe5d47933cdb9875009b78b5037dc0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.eebe5d47933cdb9875009b78b5037dc0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.eebe5d47933cdb9875009b78b5037dc0.exe
-
Size
1.4MB
-
MD5
eebe5d47933cdb9875009b78b5037dc0
-
SHA1
0e52041aa38df8ed9bafd19005ad6966ae33160f
-
SHA256
16fbb9bd558e27b8708aa964e49cadb1a6766bb195edf9869183202fd9b27d67
-
SHA512
fac49d740780b41f7a697402cf75a5dfcd3b73fa0c0d0fcf1d0f6ddc49451aff64bef839ba69766ee150000bdb17a7c43d39bba884dba6e415be417ec24044dd
-
SSDEEP
24576:1qbF8fYTOYKbDurSUQN7kBG+JqJS+WOZseId9x0FOXr2rlqEpQQJvKPzvYZHTHya:obyfYTOYKPu/gEjiEO5ItDiKPzvoS7u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.eebe5d47933cdb9875009b78b5037dc0.exe
Files
-
NEAS.eebe5d47933cdb9875009b78b5037dc0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 276KB - Virtual size: 274KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ