Static task
static1
Behavioral task
behavioral1
Sample
NEAS.485a7c0e9322f59d6a6cd0db98bce070.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.485a7c0e9322f59d6a6cd0db98bce070.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.485a7c0e9322f59d6a6cd0db98bce070.exe
-
Size
14KB
-
MD5
485a7c0e9322f59d6a6cd0db98bce070
-
SHA1
31926c3ae5ac9db190152ae8c4a888b407d6407b
-
SHA256
ed0f0be275a9e42a6654cb165cb5a83c2cd22751d638f9bcd58a4528c367b28b
-
SHA512
87ac4ef20a07c411acfd3f6e83bee58a1879a08a2e900082c23a2a9a51f1b8c2359390b9d95cab754c8d338f1ac3dc5bc5a4a5c920ad7978a9daf50fc78a0f22
-
SSDEEP
192:Aoaw1maQmabB/w4VRJlTkXtNrMdJwxDu6MVLzm8K6a5oJH0cVmcJGqDE045HQ:AJfOMu45lTkdGEDu64ECSuDE045H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.485a7c0e9322f59d6a6cd0db98bce070.exe
Files
-
NEAS.485a7c0e9322f59d6a6cd0db98bce070.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ