Static task
static1
Behavioral task
behavioral1
Sample
NEAS.fa184aa78d5a88e31a8c1e748ec8d700.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.fa184aa78d5a88e31a8c1e748ec8d700.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.fa184aa78d5a88e31a8c1e748ec8d700.exe
-
Size
14KB
-
MD5
fa184aa78d5a88e31a8c1e748ec8d700
-
SHA1
bf7230ea70358a7ef751bf3f4243c14276d71092
-
SHA256
c18f26c8758f2d61ef86dfb1fdfbdae34cc9dcc42fca963feccf548dcbbfc3ac
-
SHA512
34e902718478da4e3472697600bb17bfd35a9be19c2c161bac9c2c2aeb7feda818b3f7347fa6c6d61d6fb4c910fe4e2c5645c7d223ec2c1f864e63b72db816ff
-
SSDEEP
192:U7SI/EsTAeKnfncsi5vE74mbqDE045HQQZb/Zb/Zb/Zb/Z:Ue1sHKnf/iC74mODE045H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.fa184aa78d5a88e31a8c1e748ec8d700.exe
Files
-
NEAS.fa184aa78d5a88e31a8c1e748ec8d700.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ