Static task
static1
Behavioral task
behavioral1
Sample
NEAS.1f2b4fccb9db85f17174d7887bca1210.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.1f2b4fccb9db85f17174d7887bca1210.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.1f2b4fccb9db85f17174d7887bca1210.exe
-
Size
1005KB
-
MD5
1f2b4fccb9db85f17174d7887bca1210
-
SHA1
9645eb62babdb8d3b10c06e5df44cf48311e1e5f
-
SHA256
85c9709c48b9e48d0bc3b969e2223fcc309334d91540113f5e4a0b7a60ee95d4
-
SHA512
f77d58ee872d25047f7c127ef07b4c35ac9b5c4b0fff6fc12d993fa9bb3d0f1db0f35315539f18ee8c036dbd3971d416ed9e3ff168b57c6af89d1fb869ef580c
-
SSDEEP
24576:ybxvuLN2PPkIkII/LN9eOLN9ReeeeIt44hTPZeCeefeeTfeeeeu:ybxvuLN2PPkIkII/DeODReeeeIt44hTU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.1f2b4fccb9db85f17174d7887bca1210.exe
Files
-
NEAS.1f2b4fccb9db85f17174d7887bca1210.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.bss Size: - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.nah Size: 1024B - Virtual size: 676B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ