Static task
static1
Behavioral task
behavioral1
Sample
NEAS.25cd50f68b0ddf8adcd973b018925c40.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.25cd50f68b0ddf8adcd973b018925c40.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.25cd50f68b0ddf8adcd973b018925c40.exe
-
Size
14KB
-
MD5
25cd50f68b0ddf8adcd973b018925c40
-
SHA1
d6ce9d1a6e7181072780d59f894d7d2015696d8d
-
SHA256
978b5db7d384b2d82a993b0295027af7bdedc9e5a290c08e93009f63e19cd013
-
SHA512
4eb4e8b5d37e1aa924449846d9f649fe582e975a963126a2a174e182efec09bf79b448ff21f1d8cf24292d35e67d91ef1fb01a9566e6d371c4d6b3042b7eab66
-
SSDEEP
384:ljKRlJBRnF1+DcHIq4hFLQuiNDE045HGWWWW:leJh1iIIPhZhWA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.25cd50f68b0ddf8adcd973b018925c40.exe
Files
-
NEAS.25cd50f68b0ddf8adcd973b018925c40.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ