Static task
static1
Behavioral task
behavioral1
Sample
NEAS.de2639e6cfdc0bfeaa4f2faa3b46e850.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.de2639e6cfdc0bfeaa4f2faa3b46e850.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.de2639e6cfdc0bfeaa4f2faa3b46e850.exe
-
Size
14KB
-
MD5
de2639e6cfdc0bfeaa4f2faa3b46e850
-
SHA1
5636725696ff5ef07573883ea1a3d69db3cd0530
-
SHA256
e79a9c2ac2465370c013b0a1bc2f865b7a7acd51a566987b157a4ff6e5ed5ecb
-
SHA512
e9ed1a04e5209e10e6f6d9a0d3e52c9c5e2505ae7bc68bc97e758461fb102980de2717bfb857cb93de8149b8551a021d500f78f2abc42e471644230db0dcf646
-
SSDEEP
192:lpMK2Mx02Yr8zKBJavSizFiVEII8RqDE045HQL5jP5jP5jP5jP:fMKE2YAzKuvSiszI84DE045HG999
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.de2639e6cfdc0bfeaa4f2faa3b46e850.exe
Files
-
NEAS.de2639e6cfdc0bfeaa4f2faa3b46e850.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ