Static task
static1
Behavioral task
behavioral1
Sample
NEAS.e7f4ea594f76f0099a9c24537ad31d20.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.e7f4ea594f76f0099a9c24537ad31d20.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.e7f4ea594f76f0099a9c24537ad31d20.exe
-
Size
565KB
-
MD5
e7f4ea594f76f0099a9c24537ad31d20
-
SHA1
40b45ae28dd18e0dddeac6d166052381ee766765
-
SHA256
c60f7a98f55e443e4fb690398072bab79400a457c2ea75b3f6f665d8079a5c66
-
SHA512
1c37f59718fe23ef5470303a1415adbca372fbb7e466b3648d3d91185f5533abd106a4dcd916973637e08fa50c1869410c8493bab8179c44b1ad6269642c15eb
-
SSDEEP
12288:OytbV3kSoXaLnTosJi4yX/r2ZmTxT89qNRSiWl2+f6J6hJ7+VUm3f:xb5kSYaLTVJGXz2uSqNRTWlRfgyJeU0f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e7f4ea594f76f0099a9c24537ad31d20.exe
Files
-
NEAS.e7f4ea594f76f0099a9c24537ad31d20.exe.exe windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.rdata Size: 163KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ