Static task
static1
Behavioral task
behavioral1
Sample
NEAS.2b49b319517036dcc9c9bf45b7c32a50.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.2b49b319517036dcc9c9bf45b7c32a50.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.2b49b319517036dcc9c9bf45b7c32a50.exe
-
Size
14KB
-
MD5
2b49b319517036dcc9c9bf45b7c32a50
-
SHA1
199d3a3480f771de8e132399d2ca88577f5d07eb
-
SHA256
7f70c7098b40bf64d412e7c20b6d704a157aaf82c5f45dcd0c369a2346fa1354
-
SHA512
ea204cf36efda893740aabce0f9d5a76f75601111bf1ff96c7b650e521e470f189e4c89308c6c7aad9c1cfd8a11313d4e35d29ae920db7cda62ada53679b706d
-
SSDEEP
192:OxeLVkYps8YacO392Pfupbn61TbnnHhN43R/8toaCO9cjTqDE045HQ:OgLRpsGc9Obn61fnB0/q/J962DE045H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.2b49b319517036dcc9c9bf45b7c32a50.exe
Files
-
NEAS.2b49b319517036dcc9c9bf45b7c32a50.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ