Static task
static1
Behavioral task
behavioral1
Sample
NEAS.0e8dcc59e0a8b59de20996eda9ac0638.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.0e8dcc59e0a8b59de20996eda9ac0638.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.0e8dcc59e0a8b59de20996eda9ac0638.exe
-
Size
64KB
-
MD5
0e8dcc59e0a8b59de20996eda9ac0638
-
SHA1
b97639db483449ddb4289fc831d7a9bbfa65c7ef
-
SHA256
4318a206bf5004ddb306ff7509a9ceff9c84514cbff1c5bcc570c7ef1360b886
-
SHA512
a95747d58fad0ab03a27ead037d4196ec0bdbda6efe1922ffc87cd1b5ed4660ee3348b5f903d476f53f50ff6cecfbcebe7a7ee54c40089db90f167b4d04aae07
-
SSDEEP
1536:toB3ueB9RXvkBOJr0c9RqKlosQgP6Ni+4MjbEvV1iL+iALMH6:to55Xv1qKCsQgKSuEvV1iL+9Ma
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0e8dcc59e0a8b59de20996eda9ac0638.exe
Files
-
NEAS.0e8dcc59e0a8b59de20996eda9ac0638.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fldo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ