Static task
static1
Behavioral task
behavioral1
Sample
NEAS.2d56b5337a3b71b9df233c3cb1b312d0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.2d56b5337a3b71b9df233c3cb1b312d0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.2d56b5337a3b71b9df233c3cb1b312d0.exe
-
Size
121KB
-
MD5
2d56b5337a3b71b9df233c3cb1b312d0
-
SHA1
efe9e0c086699617d7bbbfca70aa710ae64000be
-
SHA256
9796763276a885fd35a511e9a5916ecd85bb41799474338b220d0f8dd9ba1c19
-
SHA512
9e167e1bedcef4772f5f9f6094e92a00a7315402f1f2f3964b98dce122e984b136592385c5bf13f8c97518d056b31aca37c9ab3178dfc4da2e8d00df2788adfb
-
SSDEEP
768:gUQz7yVEhs9+4T/1bytOOtEvwDpjNbZ7uyA36S7MpxRIIXVe3mU9TYwlOBTG0J4Z:gUj+AIMOtEvwDpjNbwQEIPlemUhY2nZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.2d56b5337a3b71b9df233c3cb1b312d0.exe
Files
-
NEAS.2d56b5337a3b71b9df233c3cb1b312d0.exe.exe windows:5 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE