Static task
static1
Behavioral task
behavioral1
Sample
NEAS.2e585e140ad7c28be207656f19da1350.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.2e585e140ad7c28be207656f19da1350.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.2e585e140ad7c28be207656f19da1350.exe
-
Size
237KB
-
MD5
2e585e140ad7c28be207656f19da1350
-
SHA1
13be6aa02b76e3072b2fead1357d3e999d6b994f
-
SHA256
2d02d337a06f151a6d72032ed7ac0aa2321d2e619ec15c48a1cde9d3b137b661
-
SHA512
18529ce1243ac6596fc16f0ae90699cd49dcb5ffeda330668b568cd42efa49c4462d12d5de75aff11f4d8d330e6c2b0e501108c5cd39eed096ac3a67e4132343
-
SSDEEP
6144:dXC4vgmhbIxs3NBRlfWrKy1SL8TmkCI++1RLa:dXCNi9BDWmQSL8Tm2La
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.2e585e140ad7c28be207656f19da1350.exe
Files
-
NEAS.2e585e140ad7c28be207656f19da1350.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE