Static task
static1
Behavioral task
behavioral1
Sample
NEAS.0211e11b0ce931635b0873bd6b499af0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.0211e11b0ce931635b0873bd6b499af0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.0211e11b0ce931635b0873bd6b499af0.exe
-
Size
305KB
-
MD5
0211e11b0ce931635b0873bd6b499af0
-
SHA1
35ffde8de015449c201f281dbab02b1ed887868c
-
SHA256
09444c069e784d7372ff05e8e4d69c2309b07e5de7e9e7ce90cb53b5a26572bd
-
SHA512
36df76f792fdfdc64da2df8dd30d1817d3d45433d931153106164c349f97d97af961fc5b9ed2a77f78599426f345180fd84c3c98f56b706c9d1c29bb19b14619
-
SSDEEP
6144:7fpBY9u4paRQjCmwFXkxxC21oFP7F8PAuRgIx:7fTVPu/TUMAA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0211e11b0ce931635b0873bd6b499af0.exe
Files
-
NEAS.0211e11b0ce931635b0873bd6b499af0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 221KB - Virtual size: 270KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE