Static task
static1
Behavioral task
behavioral1
Sample
NEAS.8f14e5948acacb1665e3291b2de45620.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.8f14e5948acacb1665e3291b2de45620.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.8f14e5948acacb1665e3291b2de45620.exe
-
Size
62KB
-
MD5
8f14e5948acacb1665e3291b2de45620
-
SHA1
5dd5926c0ca3ccc21e071e5f829da829d631c240
-
SHA256
bde880dcadc900b546f60abf21d6c6af61d1976fcdd7022cb6706fdebf58bddb
-
SHA512
96d42c4a888353d05637fb0c216ebdafeee411fdfa7994ba446f840efd6c633ae9de94f4946c59e123d6e299d727e1edf63adaf0881266ec28d05637383b4dce
-
SSDEEP
1536:5Y9jw/dUT62rGdiUOWWrMffJ+AxM+I+ceWgy:5Y9CUT62/UOVMffJ+AW+I+c/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.8f14e5948acacb1665e3291b2de45620.exe
Files
-
NEAS.8f14e5948acacb1665e3291b2de45620.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.po4 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
new_imp Size: 2KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
new_imp Size: 3KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
new_imp Size: 3KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
new_imp Size: 6KB - Virtual size: 6KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
new_imp Size: 7KB - Virtual size: 7KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
new_imp Size: 9KB - Virtual size: 9KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE