Static task
static1
Behavioral task
behavioral1
Sample
NEAS.c830e4757a8f7c48fcea996aba8f8980.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.c830e4757a8f7c48fcea996aba8f8980.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.c830e4757a8f7c48fcea996aba8f8980.exe
-
Size
14KB
-
MD5
c830e4757a8f7c48fcea996aba8f8980
-
SHA1
0cd9600a610fdf9525e2f1f5107c2547f4a3d2a6
-
SHA256
308cd2cf7c043fe0f48fee46e071e76d44a7b9138d8ef2ae15aed466e7f5dca6
-
SHA512
4a991b367f1ed329702e7c8d83abf0410504169079dce6fa99b823bab26a968c6a28ad103962633aeeaf902a095b0ff49631140fdcf83aa6b138c5110e378fb4
-
SSDEEP
384:LpHcanq6sZl57Zl57Zl57Zl57Zl57Zl57ZlGC5/kfomVhDE045H0kkkk:Luanq6stttttqCpbmVxA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c830e4757a8f7c48fcea996aba8f8980.exe
Files
-
NEAS.c830e4757a8f7c48fcea996aba8f8980.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ