Static task
static1
Behavioral task
behavioral1
Sample
NEAS.0e0da0faad568f2c87c9da551edfe510.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.0e0da0faad568f2c87c9da551edfe510.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.0e0da0faad568f2c87c9da551edfe510.exe
-
Size
154KB
-
MD5
0e0da0faad568f2c87c9da551edfe510
-
SHA1
e55857aef52812a14b6623bce8a3d24c96182580
-
SHA256
8ba26ff90ddf24bb77329aa7fa40d4ed1ab822ef7c5bbefb4252b3db05491f55
-
SHA512
643198db82166ccf13aae014d971bf5ba43340e6063c13d9123776af95fd59986eeef7ba63572885802caf1d5ac97ca47ae708d86d12ab6ecc7d03f9e31eb39e
-
SSDEEP
3072:f36i9V6x5j1XUNJF2gPssM6M9bTEsyharm9mTKpAImSKeTk7P2T:f3z9V41XUNJFz729bTEsIySSKpRmSKeP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0e0da0faad568f2c87c9da551edfe510.exe
Files
-
NEAS.0e0da0faad568f2c87c9da551edfe510.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rsrc Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
CPADinfo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ