Static task
static1
Behavioral task
behavioral1
Sample
NEAS.befdcada6397a60bae40fe811b2b2ce0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.befdcada6397a60bae40fe811b2b2ce0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.befdcada6397a60bae40fe811b2b2ce0.exe
-
Size
14KB
-
MD5
befdcada6397a60bae40fe811b2b2ce0
-
SHA1
fc57bc365dc17018b8e84365aee3db0adf3e4a11
-
SHA256
2f66d0d4bfb5f4eaabc776d0fbed5519e32a92ed9f42e324a5147ab1d4a566f8
-
SHA512
25f8ebb2bf6e34ed54da58bff5d8badc5c6df2934b61269a05d0346a4343931c2ba2ab5f7b51c71ff0e740992b913c7516c4431ab2e4959981999fd58778e5c6
-
SSDEEP
384:GPTvsXlVo00000000000000fcwFr2zrDE045HTgreh:i0lVo00000000000000fRFyzXAOi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.befdcada6397a60bae40fe811b2b2ce0.exe
Files
-
NEAS.befdcada6397a60bae40fe811b2b2ce0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ