Static task
static1
Behavioral task
behavioral1
Sample
NEAS.8ea0cc747a5fc4cffa95e5f2b0f1f7e0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.8ea0cc747a5fc4cffa95e5f2b0f1f7e0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.8ea0cc747a5fc4cffa95e5f2b0f1f7e0.exe
-
Size
641KB
-
MD5
8ea0cc747a5fc4cffa95e5f2b0f1f7e0
-
SHA1
08c1dec33ff175fae5c7378e862d2067f49ed3f8
-
SHA256
45b20dae36a0a3b5e6ec914025c0748180c13ff887f0cbaa76400dffd103debb
-
SHA512
21f58be0b1c1d2befe23fd34faa21468d4bb0c0f28baa08cf6d5b4a8e15985a449f6b6a31aa4acbabd6b6d036fea033622c15f20c164a5f677fd21991d90b54f
-
SSDEEP
12288:K9iQjy5F/+dngpLrCRUFO/PXHSE8q/1E1XJdBqXGc/eRjarJhxizoI40uekh6eUW:b5FWdgdCoO3j71cX7FCmaNnhgZe6a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.8ea0cc747a5fc4cffa95e5f2b0f1f7e0.exe
Files
-
NEAS.8ea0cc747a5fc4cffa95e5f2b0f1f7e0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
data Size: - Virtual size: 944KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data Size: 632KB - Virtual size: 632KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE