Static task
static1
Behavioral task
behavioral1
Sample
NEAS.ec0b7dee222d4bded2cb01ac65979b00.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.ec0b7dee222d4bded2cb01ac65979b00.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.ec0b7dee222d4bded2cb01ac65979b00.exe
-
Size
357KB
-
MD5
ec0b7dee222d4bded2cb01ac65979b00
-
SHA1
96469cb10ff68965824aaa72bbc77826d4ab62f8
-
SHA256
1dc62aea93a49e6e9f41b2d77297491878608c08da858ac47f9d341e9fd7828f
-
SHA512
6eece03dce6af9b08c8cc4a6d2d7b8b4755ed252a7e3d1d6a3384fea8fe9ab75d7b5774e30faa539d0ec5f56a748bb8870ce24bf62f852ae9f407396bd4d822a
-
SSDEEP
6144:TWxlKgzelZNQSBQGH/CSpWqT6KJcfh2m71Z:TdfBQGH6Sfep71Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.ec0b7dee222d4bded2cb01ac65979b00.exe
Files
-
NEAS.ec0b7dee222d4bded2cb01ac65979b00.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 236KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE