Static task
static1
Behavioral task
behavioral1
Sample
NEAS.b12bf0e4cf6d352d3bffbfd01b0905e0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.b12bf0e4cf6d352d3bffbfd01b0905e0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.b12bf0e4cf6d352d3bffbfd01b0905e0.exe
-
Size
211KB
-
MD5
b12bf0e4cf6d352d3bffbfd01b0905e0
-
SHA1
75015b690f2937bf796f73f253e3c13f5fee2e6f
-
SHA256
bb54f3abfd350884fb8a7e527a7a262d32c1c107cb8a49909e226828ded15725
-
SHA512
628860c1a36ffcbb4d0baf2d987665a918d8ad9344e0aae1c9ee3130f0867b79bc1d0bc8422fb0b468ab04268539e5cd1a5f05adfd2b9920b7a3a2cecb1eca78
-
SSDEEP
768:p/So4fRnlumpuE7r97LcRRGBViF6YOVyguVECBq:M1fRlPZ97YRRGzHVygut
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b12bf0e4cf6d352d3bffbfd01b0905e0.exe
Files
-
NEAS.b12bf0e4cf6d352d3bffbfd01b0905e0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
FKP0 Size: - Virtual size: 18.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
FKP1 Size: 203KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE