Static task
static1
Behavioral task
behavioral1
Sample
NEAS.18e5112da2387e1fcb68cc76e0c00e00.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.18e5112da2387e1fcb68cc76e0c00e00.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.18e5112da2387e1fcb68cc76e0c00e00.exe
-
Size
812KB
-
MD5
18e5112da2387e1fcb68cc76e0c00e00
-
SHA1
dd308d469687e2e60c400a2e23c2e61932097d32
-
SHA256
e24f1172689df384edaeea2f0c2c2790e0614cf687f3ebf5e4203d9f36e4a451
-
SHA512
244ae66d26d21019255aa2d1716c99118c0d935ebd3279625a253e35b88ac0e8e27f6fbee6754b7b1c3463407ad9312d0d71a1e7d220eefd5d666004b485191e
-
SSDEEP
12288:+FmrMAgn845UmsUCVF6Zs/2yeDh89lxQO9l:8YMU1UCVyQ2yeDh8T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.18e5112da2387e1fcb68cc76e0c00e00.exe
Files
-
NEAS.18e5112da2387e1fcb68cc76e0c00e00.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 448KB - Virtual size: 444KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 180KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ