Static task
static1
Behavioral task
behavioral1
Sample
NEAS.5a29b605b6c0e0b25e4b80e973b83b60.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.5a29b605b6c0e0b25e4b80e973b83b60.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.5a29b605b6c0e0b25e4b80e973b83b60.exe
-
Size
812KB
-
MD5
5a29b605b6c0e0b25e4b80e973b83b60
-
SHA1
a4e346ba6dd5d92180b681035075ccb6a5b52c14
-
SHA256
282462f249b3f18537531c1cadc1fa5cc7499f53de9cde6044bb1975d28a1a4f
-
SHA512
d8129c09c28480c95cdf90ea92f7866b1140e75eb8d29ef01e90054dc4e8cd86988ea5c5b72d13b29618d300508d38037b24dd58e9a45452b8f965165dd4f856
-
SSDEEP
24576:z2wTeLOT6Krw+2KeCI+rsAfHH/ZZxt/OITD:NSLOmL+2v0HH/JMITD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.5a29b605b6c0e0b25e4b80e973b83b60.exe
Files
-
NEAS.5a29b605b6c0e0b25e4b80e973b83b60.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ