Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d80444852b973516525cbfbae26c51d0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.d80444852b973516525cbfbae26c51d0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.d80444852b973516525cbfbae26c51d0.exe
-
Size
662KB
-
MD5
d80444852b973516525cbfbae26c51d0
-
SHA1
cb23e2dac018e14caf622d5f63bd3a66b0ec626e
-
SHA256
a74b7bcf8908638929f84f89e755edcee932972bb36685839e18cebf753336ed
-
SHA512
d6960624e4cdfd01133013c4f14ff04a7c284584682e3d671294649893b28eb199b496cc0e82123af6c6193fde56f3a5cb2c9affcb0435f384dc4534f87665d1
-
SSDEEP
12288:zJMxy+7SM0ZWEPZrkbYnGxRi0fIPOkUJDAboPNm46SprQTlbjKCgI5p:z2wTMUBGxR6OZJAbkJnopKCTX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d80444852b973516525cbfbae26c51d0.exe
Files
-
NEAS.d80444852b973516525cbfbae26c51d0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ