Static task
static1
Behavioral task
behavioral1
Sample
NEAS.bc98e31ae8429226ba67e9bf59bc5ae0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.bc98e31ae8429226ba67e9bf59bc5ae0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.bc98e31ae8429226ba67e9bf59bc5ae0.exe
-
Size
442KB
-
MD5
bc98e31ae8429226ba67e9bf59bc5ae0
-
SHA1
4174526f11244b688008eefe6c304cc4cabd6572
-
SHA256
36b55bfffec0de935b0a0ff0fafcf301d52ce84bda484e850cfebc230e8a9355
-
SHA512
c0d8dc5f371bf887cf260f16a3ac076b8ad6c9de0d6e65446e15ec5147e5d310261a855ce3ec20dc6e664dd96bc6235d3714c447c51347970a98e89ba304cf84
-
SSDEEP
6144:CqppuGRYx4H712f/SBTpzZA6rXD40b+7TJDAMyz9GbQT+:CqpNtb1YIp9AI4FDAMyz9Gbt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.bc98e31ae8429226ba67e9bf59bc5ae0.exe
Files
-
NEAS.bc98e31ae8429226ba67e9bf59bc5ae0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
NDltoTPW Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tJrdyPER Size: 177KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE