Static task
static1
Behavioral task
behavioral1
Sample
NEAS.1ded5bbd8e1397536a5e65feedbb1f60.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.1ded5bbd8e1397536a5e65feedbb1f60.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.1ded5bbd8e1397536a5e65feedbb1f60.exe
-
Size
620KB
-
MD5
1ded5bbd8e1397536a5e65feedbb1f60
-
SHA1
0ae89f4ceb823b231b37b6d781e8cced9c05c97c
-
SHA256
33a5f153db7277d9c6633cedb81d194e4d43d36b83979acb060454d15ef50131
-
SHA512
dc6f64156beb6bd2be7348d8d22d51a290e3824df266500d8373df9596dbcea7569b9fbbfb92d390084fbed3f4ff31c5e7170bc119725c5a4895f2069cb30e38
-
SSDEEP
3072:wCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VZMQTCk/dN92sdNhavtrVdewnAx3wmVL:wqDAwl0xPTMiR9JSSxPUK1dodHi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.1ded5bbd8e1397536a5e65feedbb1f60.exe
Files
-
NEAS.1ded5bbd8e1397536a5e65feedbb1f60.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 245KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE