Static task
static1
Behavioral task
behavioral1
Sample
NEAS.c799c76282889ddb793c6363f7fb92d0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.c799c76282889ddb793c6363f7fb92d0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.c799c76282889ddb793c6363f7fb92d0.exe
-
Size
806KB
-
MD5
c799c76282889ddb793c6363f7fb92d0
-
SHA1
5fd4420f55f828418e957964bee4e46881831539
-
SHA256
64a10abf079197537fa9f90007428e1d667a6bf7e219353aa51b96b83b56142d
-
SHA512
62819a045eccd56a1f5fc36ecdb8aa4969b3c39ffb238a16bd46114995d1a23db7c6a55b07b343214d2a97d267408aa9ebf373fac1605a70e88fb77182d36c28
-
SSDEEP
12288:VAMi6MOEMMAMipi+ZDdEORHqScvxVZQx0UeCyO:ri+cOR6vXZQqUCO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c799c76282889ddb793c6363f7fb92d0.exe
Files
-
NEAS.c799c76282889ddb793c6363f7fb92d0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
ukiwGhLB Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
MIZwSMcb Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE