Static task
static1
Behavioral task
behavioral1
Sample
NEAS.ecee017f57f50d1de2e04c63f9f5f490.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.ecee017f57f50d1de2e04c63f9f5f490.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.ecee017f57f50d1de2e04c63f9f5f490.exe
-
Size
14KB
-
MD5
ecee017f57f50d1de2e04c63f9f5f490
-
SHA1
3a497a20be1508b9b897c16575bcfc533a94230d
-
SHA256
0ff1ddcd25fc509c416bf9cd6a61685ab485ae133f9fdb25a93ae0e9187e000b
-
SHA512
a8cfd32a4a21345fbd5ed6f23dc13730ece8c05d57a8f478ddc2a15f32f5d6e46dd480d71c20bd9488fcd6422a2dd197d770139c46b907171db5ebbccc96cef4
-
SSDEEP
192:wwTJnOeabRZb2NeR6CWe6t7p/GaVPTgUEh2GS+iQqDE045HQh8k8k8k:wOhN46KOTbbN+ifDE045HD//
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.ecee017f57f50d1de2e04c63f9f5f490.exe
Files
-
NEAS.ecee017f57f50d1de2e04c63f9f5f490.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ