Static task
static1
Behavioral task
behavioral1
Sample
NEAS.ca5ace27a745102eb27410421086d750.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.ca5ace27a745102eb27410421086d750.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.ca5ace27a745102eb27410421086d750.exe
-
Size
363KB
-
MD5
ca5ace27a745102eb27410421086d750
-
SHA1
1e5d97ffd8e417bf2eca6233b70607e798b72814
-
SHA256
9a45055832877e19805ca4b8b7f8086fff94d54b1f2166bad5a1a73d24bdba94
-
SHA512
aabffca2ec5543272003f613bc413744409b2712080cb9a017e3932541392aa7798da0a6ee46afa63a833373f3730236735a530261e2bb255dfc204300b984f1
-
SSDEEP
6144:9/SgljwRwdX/1H9kM2AfQ2C4e9IFUhh3tG5V/:osltHb/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.ca5ace27a745102eb27410421086d750.exe
Files
-
NEAS.ca5ace27a745102eb27410421086d750.exe.exe windows:6 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ