Static task
static1
Behavioral task
behavioral1
Sample
NEAS.c05f8469468222cf00f3176d7cf9bd20.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.c05f8469468222cf00f3176d7cf9bd20.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.c05f8469468222cf00f3176d7cf9bd20.exe
-
Size
436KB
-
MD5
c05f8469468222cf00f3176d7cf9bd20
-
SHA1
48d5fc9608579912428ee71ddb00e22838a74122
-
SHA256
78750943d803039925e705789984f5b68359d66d0f53a28fa5719424531e6856
-
SHA512
32999edd7ef64b24c0ae30760607b6c28ea7f888ffaf3601b4ada36419d2aa99784385a6b272d00bbabe2e4aa5cd32bb137dcec9c72e2db3a724a307d8caeb01
-
SSDEEP
12288:XwkWTrIfvmQFC2Gknth4S5hioQumJBFh0E:XwnTrIfv3C2Tnthl5hif3J3h0E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c05f8469468222cf00f3176d7cf9bd20.exe
Files
-
NEAS.c05f8469468222cf00f3176d7cf9bd20.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 395KB - Virtual size: 394KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ