Static task
static1
Behavioral task
behavioral1
Sample
NEAS.11b1b4ce40aff27f8ad21e11412906b0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.11b1b4ce40aff27f8ad21e11412906b0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.11b1b4ce40aff27f8ad21e11412906b0.exe
-
Size
204KB
-
MD5
11b1b4ce40aff27f8ad21e11412906b0
-
SHA1
5419f99fc87d54e765d352d9f0fa433760038f9c
-
SHA256
8c92e9d8f81f83d97ff90e7fef4c2b691d70a46fe2ef095a318ff61304db0416
-
SHA512
b995b01985618bbbf49b6d70911891d5a0c5166fa18cf53d629010bee8b3d71298b60458d5f7349f8cf4677009d925090b337c232430700c34323bbeab0e273b
-
SSDEEP
1536:loC9JsPn+Rlr3jbShe4vR4B4GQi0L73lr2LmY:lw4lLHShU4G87VI3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.11b1b4ce40aff27f8ad21e11412906b0.exe
Files
-
NEAS.11b1b4ce40aff27f8ad21e11412906b0.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kofbl Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE