Static task
static1
Behavioral task
behavioral1
Sample
NEAS.b813858955f4a2a8989510385e7897e0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.b813858955f4a2a8989510385e7897e0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.b813858955f4a2a8989510385e7897e0.exe
-
Size
14KB
-
MD5
b813858955f4a2a8989510385e7897e0
-
SHA1
ce4ac857243b12ed9c93942fcd1f354229e0b361
-
SHA256
8fd121ad4fdeee152cd98668e4afaf7188652ca86ab8b875b28cbc9b62727c57
-
SHA512
24825bf58f883eb185a79f4e83686f5c7756f2a9b1e1ea7793d436b60a5c05a47967c546a49d362b8968196ab2c9c2208a0b874c51d360abc65d88f836361844
-
SSDEEP
384:y222uNjGpeSSSSSSP1111111Pm9Fi7dUDE045HrJJJJ:02QSSSSSSP1111111yUwA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b813858955f4a2a8989510385e7897e0.exe
Files
-
NEAS.b813858955f4a2a8989510385e7897e0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ