Static task
static1
Behavioral task
behavioral1
Sample
NEAS.de22f04e14c0bf29f2719cecb1e69420.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.de22f04e14c0bf29f2719cecb1e69420.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.de22f04e14c0bf29f2719cecb1e69420.exe
-
Size
472KB
-
MD5
de22f04e14c0bf29f2719cecb1e69420
-
SHA1
391146dc1f851a5c49a389f182f3ce9f2fac4f3d
-
SHA256
0b5a53de0d016be7756df5f096c8b6627448a45ff06d2bda30b8a59922ffb9ed
-
SHA512
3cd9ebcbc02c0230f228ba6764605a3463b023b466b9dee6184fb6dab32b35035fb6946c1be9b8d45950e6ffc1981fe607413a91ce825c0f6220c1144670b983
-
SSDEEP
3072:E68RinudiP52xx67lLdgiHDo8lXPhy9hg5q6:E3kgiPA6R2P8lXPhyLcJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.de22f04e14c0bf29f2719cecb1e69420.exe
Files
-
NEAS.de22f04e14c0bf29f2719cecb1e69420.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ