Static task
static1
Behavioral task
behavioral1
Sample
NEAS.e95c798484e5ac0117d12579b57b2480.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.e95c798484e5ac0117d12579b57b2480.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.e95c798484e5ac0117d12579b57b2480.exe
-
Size
472KB
-
MD5
e95c798484e5ac0117d12579b57b2480
-
SHA1
f479ee33dad5fe647c7c6e52affbe087c90b18f1
-
SHA256
ca912c36afc85dd50a26e5f01bf1d187d482c665d6c5a1383bf5a6628a70b74c
-
SHA512
0e1c2b840230a42fca90bf272e40a75c4c8369d19a21555afe28c33d866e38d841e1d0ec6649b72c98aff68d97ea20598f418205ddbd27ea969be49eaaaa8f25
-
SSDEEP
3072:r8RinudiP52xx67lLdCiHDoZ8+uxRXRHJtHAeO1yBCZ:YkgiPA6R0PZibXR7At1mCZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e95c798484e5ac0117d12579b57b2480.exe
Files
-
NEAS.e95c798484e5ac0117d12579b57b2480.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ