Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d64228c67e7c169f1b31d768864d0040.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.d64228c67e7c169f1b31d768864d0040.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.d64228c67e7c169f1b31d768864d0040.exe
-
Size
14KB
-
MD5
d64228c67e7c169f1b31d768864d0040
-
SHA1
547b57b7a9fc724ea3b4b4b1a34004110ef05fff
-
SHA256
01b3f100c030906b7c12a9c01716a2066ba7a57c7d494fe66724302e97b0db45
-
SHA512
fa363877f3dcbb24bbff1f6a0272d017fb54fec25792cd51826c92c4c9851d9921caa46ec6771ff4c70762199da4000b1625639943063294530d8ac7af120a06
-
SSDEEP
384:h1l5GyFiorszLWT9D51CWoj3aDE045HSEEEE:hLLnszLWVPwgAYEEEE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d64228c67e7c169f1b31d768864d0040.exe
Files
-
NEAS.d64228c67e7c169f1b31d768864d0040.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ