Static task
static1
Behavioral task
behavioral1
Sample
NEAS.cb5b2f490fc0ab0ca698317b429b5f70.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.cb5b2f490fc0ab0ca698317b429b5f70.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.cb5b2f490fc0ab0ca698317b429b5f70.exe
-
Size
40KB
-
MD5
cb5b2f490fc0ab0ca698317b429b5f70
-
SHA1
8a414b474e270a6dde720ea8c412819c8d4d45d8
-
SHA256
4e482ad47fe971d20149d9ed2f225d779ad4e5e395d104ab43694946e06e8bf9
-
SHA512
dc9ad9eab9cc46bbfd67b42c51da277c9a7f6316283c44d19f39b0945d9d474ab5454ffa88f856aef1c64884a25dcfe48a769498d59108518cba73701df31055
-
SSDEEP
384:2NxtUBi3hI1593n8c3n8c3n8c3aWWWWWWWWWWWE4kGbTLDE045H3EEE:2btUBi3o8C8C8TWWWWWWWWWWWZAtEEE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.cb5b2f490fc0ab0ca698317b429b5f70.exe
Files
-
NEAS.cb5b2f490fc0ab0ca698317b429b5f70.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ