Static task
static1
Behavioral task
behavioral1
Sample
NEAS.8012993597ccf4c1b6f0bb1a55c10ab0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.8012993597ccf4c1b6f0bb1a55c10ab0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.8012993597ccf4c1b6f0bb1a55c10ab0.exe
-
Size
629KB
-
MD5
8012993597ccf4c1b6f0bb1a55c10ab0
-
SHA1
37a53f99cb0eeb975cbbecba1b9c265f15205d0a
-
SHA256
d0ce097a9f7a43da8b9134fe682d85871b82a7c72f6d5a1095525b5ea4431aa7
-
SHA512
08672762709a29bc8a5b88b764ca3512a619ac9811c7881dc5cf0d5b740633969ce2160600d6dcfd3ae35436d07db790e04cf70321556beb62a3e7ca2b9f9023
-
SSDEEP
12288:ki7OI5LMAEUm7NsplgHYcos1EAu2QmHtLKL+JTESN/gKmz7:ki7/dMAbM8lgH2sS12QmHta0ZyKk7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.8012993597ccf4c1b6f0bb1a55c10ab0.exe
Files
-
NEAS.8012993597ccf4c1b6f0bb1a55c10ab0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
EPE0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
EPE1 Size: 596KB - Virtual size: 596KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE