Static task
static1
Behavioral task
behavioral1
Sample
NEAS.efeceeee4ddc520666e854362661cfb0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.efeceeee4ddc520666e854362661cfb0.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.efeceeee4ddc520666e854362661cfb0.exe
-
Size
486KB
-
MD5
efeceeee4ddc520666e854362661cfb0
-
SHA1
c40308f9046f39404a48a788d04f8ddbeb38df0c
-
SHA256
e4783d5fd2327b622e9dd9e71b92e6dd8306479338cae26ce0012c1c6a11ee74
-
SHA512
cfeedbf118877884f9a17eeecd4c7fc35ad3d257026de2927cb4e4a83232f9bcfd34e6fce4e318168a8e8bd585c478904b63f1222a9f82a5d4f0ee76abd7dc0a
-
SSDEEP
6144:CqppuGRYx4H712f/SBTpzZA6rXD40b+7TJDAMyz9GbkHWHLKuPKQsKxaDSARPzv3:CqpNtb1YIp9AI4FDAMyz9Gbazv3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.efeceeee4ddc520666e854362661cfb0.exe
Files
-
NEAS.efeceeee4ddc520666e854362661cfb0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
NDltoTPW Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tJrdyPER Size: 177KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE