Static task
static1
Behavioral task
behavioral1
Sample
NEAS.8ca5183179d20ea21498177697ba0d40.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.8ca5183179d20ea21498177697ba0d40.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.8ca5183179d20ea21498177697ba0d40.exe
-
Size
504KB
-
MD5
8ca5183179d20ea21498177697ba0d40
-
SHA1
8d01bf8d301fb60cf6afa13944594f7333d31e4b
-
SHA256
224c0212bff2d8815d429de620f83bcaac81bdcc6312f8c2095fcdb85deb66da
-
SHA512
515b7304860cee0ab531be60b63d854418b6a93dc214e22eeab065f5d52f2565941251c783d3d3da99b56f3a6c710e8b493db38de43b4baa539225b6d354c4af
-
SSDEEP
12288:696Zdt5e9tWl+241GevfEBH4jxMgTpJ/NbkP:696/t5et2kGSfQH4jxT/qP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.8ca5183179d20ea21498177697ba0d40.exe
Files
-
NEAS.8ca5183179d20ea21498177697ba0d40.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 608KB - Virtual size: 604KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ