Static task
static1
Behavioral task
behavioral1
Sample
NEAS.b3fbc8e52bbb010144a80f651c6e29b0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.b3fbc8e52bbb010144a80f651c6e29b0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.b3fbc8e52bbb010144a80f651c6e29b0.exe
-
Size
901KB
-
MD5
b3fbc8e52bbb010144a80f651c6e29b0
-
SHA1
0f514a9254d2a912f9edb0f1e0d6d6f70949fde4
-
SHA256
51675e083ff35c9c7b3e24edc67e1bac7e827412e9808d8c5ca29ec3570e4a33
-
SHA512
a33879c8a5090453fdb45c9c4bfb0aca99b9ac966dd89b9be432753f2d266ae2b3d4350310e3479957c22245600cb65df0b21b38bef0949f9648d52d93f30d36
-
SSDEEP
6144:gDCQDCwfy7DC5DCwfy7DCQDCwfy7DC5DCwfy7DC0:gN7y7o7y7N7y7o7y75
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b3fbc8e52bbb010144a80f651c6e29b0.exe
Files
-
NEAS.b3fbc8e52bbb010144a80f651c6e29b0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 104KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ