Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d7ff8a1864a2a65a7d5857d452670710.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.d7ff8a1864a2a65a7d5857d452670710.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.d7ff8a1864a2a65a7d5857d452670710.exe
-
Size
14KB
-
MD5
d7ff8a1864a2a65a7d5857d452670710
-
SHA1
ee04eb5df7bdb5c77b01e11060eb76a9c2fb100e
-
SHA256
45252dcc1c77a949aa4db795ec8e03d19eafcaf418a28a86c3d0937b4adee49a
-
SHA512
233a87ff9274d136b665c0a402f260ff07e37b40f004c5e95671255d47cdaec31669528b3b6b41dc70e08610b44b8bc0044adbaf352e6b3e5d44879fdb8a9864
-
SSDEEP
384:HaAuPE+aZHO9ZHRu57bOw2cb65TDE045H8p6p6p6p6:HahcunS+qkA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d7ff8a1864a2a65a7d5857d452670710.exe
Files
-
NEAS.d7ff8a1864a2a65a7d5857d452670710.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ