Static task
static1
Behavioral task
behavioral1
Sample
NEAS.0c11f9791b5190aa0d5a10d7f3b83470.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.0c11f9791b5190aa0d5a10d7f3b83470.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.0c11f9791b5190aa0d5a10d7f3b83470.exe
-
Size
485KB
-
MD5
0c11f9791b5190aa0d5a10d7f3b83470
-
SHA1
0e9e63a7a5a9d42043920c20ab05117769a2ec45
-
SHA256
5d6bfe618f3a096e58b56e1280eeb598f54ecde6bd63453cc8e4f6a8eb2b62bb
-
SHA512
fb437c9f13c32f93670176d0d011e20a7a2ca497e2e490d2c4f73fe8603a27d5351f4a47d6fb81bf61309918369a02dd5b3288fb9c996c5f03d76e75f74db583
-
SSDEEP
12288:SQhs75r9isId62T87iJ9YQqOEG9RHJa7S9Yf8u:SrrIsILA7iIQl9RH07Ff8u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0c11f9791b5190aa0d5a10d7f3b83470.exe
Files
-
NEAS.0c11f9791b5190aa0d5a10d7f3b83470.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.rsrc Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 471KB - Virtual size: 472KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE