Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d26f3825eb236da6044aa97927dd0a20.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.d26f3825eb236da6044aa97927dd0a20.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.d26f3825eb236da6044aa97927dd0a20.exe
-
Size
1.6MB
-
MD5
d26f3825eb236da6044aa97927dd0a20
-
SHA1
85861ed24b7e14fe055d1d1d127983eaa46e7815
-
SHA256
78e6011519db6c48d3e9c1ac454665486434571112ec48233dfd9fc5cac23106
-
SHA512
32a2ee0ff3d6f6e46359661aee9a194f30f04b6a82d85cecd34d5e15875ee9980355f2ce0a0737d8decb9faee05760498db6098a2a994a02ed28df0afd6cbfd6
-
SSDEEP
49152:CdumDw8polTPAjTmZKMAIWy0ZhAFEuCeyULcb8U5lFAFS:Cdu6xWlTg6KpyuAhyULVUPFAY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d26f3825eb236da6044aa97927dd0a20.exe
Files
-
NEAS.d26f3825eb236da6044aa97927dd0a20.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
HWAxCMck Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DrtWJgcR Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE