Static task
static1
Behavioral task
behavioral1
Sample
NEAS.b84d8dbaa79356fabf73075338a0bd80.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.b84d8dbaa79356fabf73075338a0bd80.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.b84d8dbaa79356fabf73075338a0bd80.exe
-
Size
14KB
-
MD5
b84d8dbaa79356fabf73075338a0bd80
-
SHA1
eb745d01fab9e00861a24949383a0c0292dea3b0
-
SHA256
18af2ebcd13cec07c8bc34fe750d2564b087bc93c16a84c43dcd5b594b58561f
-
SHA512
7d075ce7bd41e13e3c93b401efcfe44f149789e14c69a994fd688417141d32c1ba6413194a476aa068b964cae37108990485218f9bbc528974cac7ac8b9c1e02
-
SSDEEP
192:8SY4wblqAs7iqcpY7loWLF5UOLmg+PiTWpqDE045HQ:8SPwblzaiqcpYpZurDiKgDE045H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b84d8dbaa79356fabf73075338a0bd80.exe
Files
-
NEAS.b84d8dbaa79356fabf73075338a0bd80.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ