Static task
static1
Behavioral task
behavioral1
Sample
NEAS.1250eb3af9a180f5f4918138dfd60040.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.1250eb3af9a180f5f4918138dfd60040.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.1250eb3af9a180f5f4918138dfd60040.exe
-
Size
204KB
-
MD5
1250eb3af9a180f5f4918138dfd60040
-
SHA1
90276dad4fc55f7faf17b98efd7534dc41454385
-
SHA256
aa14c658541f698c7d2ae94055d29bb27fc9f787309d47673d45ca4c71dd5259
-
SHA512
1780a5fd05eba223c206a01b61c096ebe80f84ad8b6298f4d9818efff5ba95f084f79d7447b319c9f4891e1f84a5f4d1cd79700351299c3da8187c7ed17d30fd
-
SSDEEP
768:P6cPsAifwZJ0cZGUk6vJOBdhqm2PeaiBWJQekPrVU02p/1H5/Xdnh:SccYH/Gnc+hmlJQekju02LH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.1250eb3af9a180f5f4918138dfd60040.exe
Files
-
NEAS.1250eb3af9a180f5f4918138dfd60040.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kofbl Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE