Static task
static1
Behavioral task
behavioral1
Sample
NEAS.5f2862b6d8c5a8f70d47b391c5e7c110.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.5f2862b6d8c5a8f70d47b391c5e7c110.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.5f2862b6d8c5a8f70d47b391c5e7c110.exe
-
Size
14KB
-
MD5
5f2862b6d8c5a8f70d47b391c5e7c110
-
SHA1
24c2161bf14c0ceef5de91064a85c2c78ecccafb
-
SHA256
942a8bc6063c4de21f8efb19988a947a1150e46ee33d49b81c38265c2fbe96e4
-
SHA512
1ca6328adb6768f140e2ef6593488ba04a9a31f6ed374b08f0b44932705bac8e31d1012a369b60d2180c13ad156e0e26bb523a5bdde3cf1d2f40008e7107ed4b
-
SSDEEP
192:59aISgF0XYCIZ6eRA1W7c5oowf69a1bjqDziYpZdhuOqDE045HQO888:3SvDeRGW7c5oX1vsi+jhcDE045H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.5f2862b6d8c5a8f70d47b391c5e7c110.exe
Files
-
NEAS.5f2862b6d8c5a8f70d47b391c5e7c110.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ