Static task
static1
Behavioral task
behavioral1
Sample
NEAS.a5e4fec5ecc360b152c80f846f5ec490.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.a5e4fec5ecc360b152c80f846f5ec490.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.a5e4fec5ecc360b152c80f846f5ec490.exe
-
Size
212KB
-
MD5
a5e4fec5ecc360b152c80f846f5ec490
-
SHA1
bcaa5968294ea90bc7a13e3ca77a39e6365ff766
-
SHA256
760e9a4d8911fdeed098916cff3c0bba3eafac3c99f688acb5267c655471ce78
-
SHA512
55e52147a2a0d35757b67e41303c8707dde69c409291e6f0e587e8d1247dbd815afb6b26f543f3161e4aa7582af81212e54adfa3749bfaa1c63da7c062b6d4d5
-
SSDEEP
768:C6cPsAifwZJ0cZGUk6vJOBdhqm2PeaiBWJQekpCbU02p/1H5IXdnh:1ccYH/Gnc+hmlJQekwY02LI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.a5e4fec5ecc360b152c80f846f5ec490.exe
Files
-
NEAS.a5e4fec5ecc360b152c80f846f5ec490.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kofbl Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ