Static task
static1
Behavioral task
behavioral1
Sample
NEAS.5b0032428b59ab6d70cc124a068fd250.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.5b0032428b59ab6d70cc124a068fd250.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.5b0032428b59ab6d70cc124a068fd250.exe
-
Size
14KB
-
MD5
5b0032428b59ab6d70cc124a068fd250
-
SHA1
7195db24e2109ca7337129e1fb7321a9b387349e
-
SHA256
87c866404056508fa9a84d75e79717140b0498ad023b979aa3d6f6dcf9058408
-
SHA512
3bb94f0ea3a13bed71c9730099fd842f613d20cc346c16ca3eed3b5cd8809ffa82a28810ecd1c1d2dfb41249dff5e00b8f003ae62becfc7397139433560d6d0e
-
SSDEEP
384:fqG4UxEyP+uPxsfffffffffffffffpDzyaLakgSDE045H:/SssfffffffffffffffpKjIA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.5b0032428b59ab6d70cc124a068fd250.exe
Files
-
NEAS.5b0032428b59ab6d70cc124a068fd250.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ