Static task
static1
Behavioral task
behavioral1
Sample
NEAS.b7646285828534c8a12667dd979dbdb0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.b7646285828534c8a12667dd979dbdb0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.b7646285828534c8a12667dd979dbdb0.exe
-
Size
96KB
-
MD5
b7646285828534c8a12667dd979dbdb0
-
SHA1
60ab3cad25617c3e2b120dd03eb920ae593f28ce
-
SHA256
45f93a0636a72ea430433632c6fccd8d38ae59700e3cabd9ac78770fca23cb41
-
SHA512
b022d7d6ad1bc4d2f20625397327b17e14daa46ed132c3ca519e4ae2fd237c3cd9257e6f11c280895f75c25dfcedbdb7c29f7e5ef262525f9105d26f5f9695ac
-
SSDEEP
1536:3BJ9tz4Iw0NGfQpi7MBZLAG4RsfUpawBJ9tz4:3xZVX4/awx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b7646285828534c8a12667dd979dbdb0.exe
Files
-
NEAS.b7646285828534c8a12667dd979dbdb0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ