Static task
static1
Behavioral task
behavioral1
Sample
NEAS.ebcf91a4abbf03b337e49ff5074c0270.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.ebcf91a4abbf03b337e49ff5074c0270.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.ebcf91a4abbf03b337e49ff5074c0270.exe
-
Size
14KB
-
MD5
ebcf91a4abbf03b337e49ff5074c0270
-
SHA1
c2de7782431ddf6e82e70a6bb5d7fbb457cdf80e
-
SHA256
d1dc79f121f15c60d2b67237be968cdf7775cab6d3a1c6b2ba9130ec33a9268b
-
SHA512
27d20cd740105dfdc154b559adb6f081035a8e872cd7cb8f6d5f69867ba695cd20aed4d2c06df5d278835a5cb562e5326898a4ea861a5410e2c38b297a976049
-
SSDEEP
384:E4l8fsjQRiiiiiiiiiiiiiiizKz99BEPDE045HNOOO:uU0Riiiiiiiiiiiiiiimz99ubA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.ebcf91a4abbf03b337e49ff5074c0270.exe
Files
-
NEAS.ebcf91a4abbf03b337e49ff5074c0270.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ