Static task
static1
Behavioral task
behavioral1
Sample
NEAS.8c58178cce60315f48426ceb3a78de40.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.8c58178cce60315f48426ceb3a78de40.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.8c58178cce60315f48426ceb3a78de40.exe
-
Size
330KB
-
MD5
8c58178cce60315f48426ceb3a78de40
-
SHA1
b8f02813e5800c242ed08e5c4781cd544bcc4758
-
SHA256
36db8181d0db8aa9fc8d85c355c83ce5ee6354446c4d1c21de3b1985afcc7442
-
SHA512
b54578a51093de2a13b26a451ae9490a35c369a87346c9ad10e94a5bf566ec74ff50539eb2e6dd396e16751483225d4c8e35d06c00047ec3b3d5baa6b6c9bbc1
-
SSDEEP
6144:yY+32WWluqvHpVmXWEjFJRWci+WUd201UU5EYCTvaBjuYSsQLH5AKf:hnWwvHpVmXpjJIUd2iUusvaldSsPKf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.8c58178cce60315f48426ceb3a78de40.exe
Files
-
NEAS.8c58178cce60315f48426ceb3a78de40.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 200KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ