Static task
static1
Behavioral task
behavioral1
Sample
NEAS.cafbd576a2c3ab3c8e67f9ed2a2f9900.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.cafbd576a2c3ab3c8e67f9ed2a2f9900.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.cafbd576a2c3ab3c8e67f9ed2a2f9900.exe
-
Size
127KB
-
MD5
cafbd576a2c3ab3c8e67f9ed2a2f9900
-
SHA1
ae5af3c551649e83101114c6beba9b14f95d0a3a
-
SHA256
10a9b3d4fd2db3ed2a4e458a990f73357fce392999984ad49d962c2bd11d9e09
-
SHA512
6811fb66b61cefe090ca1d37e756a04e58175f2b0e1b9d8da9e5418047b632720788c2bfc4831bcc7046eaa92ec5e54a14f7f4e60db1936dc9c06a36fa60b74f
-
SSDEEP
1536:ZGaq93mQy5PV4MSu4M3vfAlA89mWM8F4pzYU2qIUZ6kd+lpRYTjipvF2X:Z5MaVVnLA0W7M0Uvh6kd+lpRYvQd2X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.cafbd576a2c3ab3c8e67f9ed2a2f9900.exe
Files
-
NEAS.cafbd576a2c3ab3c8e67f9ed2a2f9900.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 80KB - Virtual size: 564KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 776B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ