Static task
static1
Behavioral task
behavioral1
Sample
NEAS.b2708ad23115a5bac58be0b64b64f200.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.b2708ad23115a5bac58be0b64b64f200.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.b2708ad23115a5bac58be0b64b64f200.exe
-
Size
14KB
-
MD5
b2708ad23115a5bac58be0b64b64f200
-
SHA1
ab5f8bff298e8b5074880aee2d12535e25473541
-
SHA256
455317e9dc1a4ad7be44ebc7e93e1aa122dd96d3e4fdb07d931495c997f55207
-
SHA512
eaba75f3027b56d19bd74825e4cd8fbefd795424b126d09205cb230e2e6b740d5ef9e870c5ef5a3ba72e9421c02b35a05ad456bff949f1192a9d3e09358de91b
-
SSDEEP
384:NnjG219lAsN4FkcMfSUydt17I0E2DE045HDxQxQxQxQx:NnjPAsC5A5KKKK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b2708ad23115a5bac58be0b64b64f200.exe
Files
-
NEAS.b2708ad23115a5bac58be0b64b64f200.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ