Static task
static1
Behavioral task
behavioral1
Sample
NEAS.0c96d1579509508a6190ef9701b69960.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.0c96d1579509508a6190ef9701b69960.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.0c96d1579509508a6190ef9701b69960.exe
-
Size
328KB
-
MD5
0c96d1579509508a6190ef9701b69960
-
SHA1
9e07a3989b7751933e8855bbf52550a7ae7ea825
-
SHA256
ff1a15c10085164c218737b12bacf786c430abe210b270e92e143c9d4982c482
-
SHA512
def5fee3740643ebb1c834ffcf33a162a7131766a9750338ddf212b110ddf42c3ec74a35e6baa294ba09e59dea681b4a0a11907a7d4e4a01fe6d0476170354ca
-
SSDEEP
6144:eyWOeLm+tkxoGQvT+W4+HMc+MEGRQ6saHSMf3z0AzbLUG50Tpm+MmvbWdlL0d5aU:eCemx0vN3HKGi6sYjJLUGGtedud5tr7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0c96d1579509508a6190ef9701b69960.exe
Files
-
NEAS.0c96d1579509508a6190ef9701b69960.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
xgeyx Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hu Size: 328KB - Virtual size: 328KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jq Size: 269B - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE