Static task
static1
Behavioral task
behavioral1
Sample
NEAS.1f4e9cf0901b1cfee506319a5ff19160.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.1f4e9cf0901b1cfee506319a5ff19160.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.1f4e9cf0901b1cfee506319a5ff19160.exe
-
Size
14KB
-
MD5
1f4e9cf0901b1cfee506319a5ff19160
-
SHA1
fba006e827ceb2a8aa7c50553ce96ddb5a030f7b
-
SHA256
d2954964c8bcaedc4c47884a699872c78a6a94c4fada1230940d04fc6adf7fa1
-
SHA512
4e893cd913f796c5f2886deae3909ddbf7cf51560c52d3bbe85ba1a5ecd00656994fab346e961b97679d488f1c2de206da549cdec4817258ff32d8b70b261427
-
SSDEEP
192:Q4h4YdtFNgADixPKGMHGUjk1J6yXTr00dg/gesUabkSrCjAJ1r3fqDE045HQ:Q4f3jgqoXU0m50dEsbqjmriDE045H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.1f4e9cf0901b1cfee506319a5ff19160.exe
Files
-
NEAS.1f4e9cf0901b1cfee506319a5ff19160.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ