Static task
static1
Behavioral task
behavioral1
Sample
NEAS.f59c28fd85a1d91d5145e2e7622e0850.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.f59c28fd85a1d91d5145e2e7622e0850.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.f59c28fd85a1d91d5145e2e7622e0850.exe
-
Size
14KB
-
MD5
f59c28fd85a1d91d5145e2e7622e0850
-
SHA1
471aa610b780d78ca460290d02966bc539481428
-
SHA256
70f4e29eee1896c2ec642d052d6940b3e982bc3d81e93e6d012921b6bb776249
-
SHA512
2267c6d68bb64e6a8816f519df0a28dbe8c28a94dfbaf6b3a5303c94416938dd6197acf0b6af30785d41f7d206f03a3312be8cc0e135905c2dbbde1490854989
-
SSDEEP
192:YJNlso2xyZNpu/dCUJJJJJJJJJJJJJJoo8mKG8oPzoPoqDE045HQqxxxx:63pAdCPo8m45PnDE045H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.f59c28fd85a1d91d5145e2e7622e0850.exe
Files
-
NEAS.f59c28fd85a1d91d5145e2e7622e0850.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ