Static task
static1
Behavioral task
behavioral1
Sample
NEAS.bcaf14cada28b54bf185b7c7203915f0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.bcaf14cada28b54bf185b7c7203915f0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.bcaf14cada28b54bf185b7c7203915f0.exe
-
Size
52KB
-
MD5
bcaf14cada28b54bf185b7c7203915f0
-
SHA1
cba0db90d83f975d1fd7aa6ede9c7c24ef2ff781
-
SHA256
910610bccfd45edc6c210a3c6763329d26e7d15c2de5414659c0acc182f32799
-
SHA512
e18cb87cdfda2bcb0d3cd759467148f1df9ae1157d9fd6f05246440141b6b16d106f78af2ce08f0574243ad715579d8000d25a7d375506dca4ad98de17f8b96c
-
SSDEEP
768:s2Nlzp5cx18IvTn79lfuDL8+OtgboeXpg9V4JiB6i/1H5F/s5MABvKWe:sOlPcLL7zi8+AgH5AI058MAdKZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.bcaf14cada28b54bf185b7c7203915f0.exe
Files
-
NEAS.bcaf14cada28b54bf185b7c7203915f0.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.embm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ