Static task
static1
Behavioral task
behavioral1
Sample
NEAS.f37d3592c18a98f5e6e724df2a44d3b0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.f37d3592c18a98f5e6e724df2a44d3b0.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.f37d3592c18a98f5e6e724df2a44d3b0.exe
-
Size
1.4MB
-
MD5
f37d3592c18a98f5e6e724df2a44d3b0
-
SHA1
c212dd61f4c30af8c62d197d8c997c14be9596a4
-
SHA256
2851af31c8b48a69d3c588dfd298b059fab68c7bbe5ae00dcb34e90fb1dab490
-
SHA512
4fe9900596be74c9e55aede331b1714d65672ff106cd35ed48f788968b4bf8b0843cfe5148ac89e9dcc84a195af78f5367fdb26eecc585e163be1d44103b1e15
-
SSDEEP
24576:6IOcLY6mW40QawQ/y3zQD+eRynkX6PARYUW:71LYPVcwQq3JRnkKKVW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.f37d3592c18a98f5e6e724df2a44d3b0.exe
Files
-
NEAS.f37d3592c18a98f5e6e724df2a44d3b0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
xgeyx Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hu Size: 328KB - Virtual size: 328KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jq Size: 269B - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE