Static task
static1
Behavioral task
behavioral1
Sample
NEAS.1b30ef268fbc8ae0356a9bdb81879b00.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.1b30ef268fbc8ae0356a9bdb81879b00.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.1b30ef268fbc8ae0356a9bdb81879b00.exe
-
Size
40KB
-
MD5
1b30ef268fbc8ae0356a9bdb81879b00
-
SHA1
336c244af35cead28bc82bafbd1bbc12fa2895db
-
SHA256
cf6965abdb2f0bae187f4899a0b18d80ca3f73f186796c8855d83bd3266e0c72
-
SHA512
a9ac918a473684f6f77ecc0578bddb2ce49bebc5e75127fc41d6a9202856504a02461b0b1b56529a808d9083ca2f01e92195ddfd4a3906ad72bd6087a5c921f3
-
SSDEEP
192:BWWuRcnyg1g1g1g1g1g1gbtiW5DtiEO++QElgeRqDE045HQ:BWrRcH666666btiYZZOpQpe4DE045H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.1b30ef268fbc8ae0356a9bdb81879b00.exe
Files
-
NEAS.1b30ef268fbc8ae0356a9bdb81879b00.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ