Static task
static1
Behavioral task
behavioral1
Sample
NEAS.a6f05571e04695b7b79c2c37bd95c7c0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.a6f05571e04695b7b79c2c37bd95c7c0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.a6f05571e04695b7b79c2c37bd95c7c0.exe
-
Size
44KB
-
MD5
a6f05571e04695b7b79c2c37bd95c7c0
-
SHA1
d682e5d9839931343dbe88caf063efaa7cc54ece
-
SHA256
d4f6f4d18ce8e03fc6a8de655b5e35dd22184be8c43442c704f40d4f4dd6eeb4
-
SHA512
743b90028ba0d472d127b2740e96ec4c4220a71af4c189421eb379c26db0e9e7b5d72a0fcb6ba9f92c2815eca7f41b01dac71a78c23bdc568b0a54dc38fd7785
-
SSDEEP
96:sRlRGMkfwOhl+oNXWabodMo6oKt9tOd3UA/Bgt2:SlRGMoNfbodL65t9HEz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.a6f05571e04695b7b79c2c37bd95c7c0.exe
Files
-
NEAS.a6f05571e04695b7b79c2c37bd95c7c0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 124B