Static task
static1
Behavioral task
behavioral1
Sample
NEAS.fb05da86ab4c2dc71b1b8aab98ee1890.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.fb05da86ab4c2dc71b1b8aab98ee1890.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.fb05da86ab4c2dc71b1b8aab98ee1890.exe
-
Size
14KB
-
MD5
fb05da86ab4c2dc71b1b8aab98ee1890
-
SHA1
d13ccfbb3d1da0709602176e45ff8d1c9bc3bbc4
-
SHA256
7be5f31d1ecc8ddce2ebead93c56284fbdfaa01c5ddbdfed3727f2217e60afa6
-
SHA512
518a9e97d368a852bf747ebd943555781e9853b66e366bf6ee73b0836c31a4a2bc9b075e2b078f6c7d2dd8e221873ddfc4ed6d912bbedd9b56248230c36240e1
-
SSDEEP
192:G145Vxvegcy4/RbssssssssssssssiteKE7nQjUNo6O3Ul9qDE045HQ:pV1eg/dEM40ElkDE045H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.fb05da86ab4c2dc71b1b8aab98ee1890.exe
Files
-
NEAS.fb05da86ab4c2dc71b1b8aab98ee1890.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ