Static task
static1
Behavioral task
behavioral1
Sample
NEAS.bf8cce5b4498fdfc72ecf4a075443f90.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.bf8cce5b4498fdfc72ecf4a075443f90.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.bf8cce5b4498fdfc72ecf4a075443f90.exe
-
Size
14KB
-
MD5
bf8cce5b4498fdfc72ecf4a075443f90
-
SHA1
02d32fc752e89ef6566f82618ffbb1d9807edbc5
-
SHA256
ded58dd760a2e9a6c989df4a2d5ea35d5bc1c974416ba49d0e28851c7f49255f
-
SHA512
f4d9c380f40aa8f61919ab2cb52133d1f4a2fc85d97b3ac84f0b9d2d66a0c644d11800b71a3d2df0b33b02164bd87bf5e8e807729ed04bfce0dbcf0f927d461f
-
SSDEEP
192:9H1HhTllL8TGLOrTrTrTrTrTrTrTrTrTrTrTrTrTrTrTQRkYd6+22DrbbVu/qDEi:9HRhBlLBjRv0Z2DTrDE045Huoooo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.bf8cce5b4498fdfc72ecf4a075443f90.exe
Files
-
NEAS.bf8cce5b4498fdfc72ecf4a075443f90.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ