Static task
static1
Behavioral task
behavioral1
Sample
NEAS.eb98ef9826ef1981e227ae07afb844c0.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.eb98ef9826ef1981e227ae07afb844c0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.eb98ef9826ef1981e227ae07afb844c0.exe
-
Size
518KB
-
MD5
eb98ef9826ef1981e227ae07afb844c0
-
SHA1
859f295ff5a66453d868e1c96438ae661eec882a
-
SHA256
8c282c7c49f026cf268f4303c9f78d69e1b8ea0d46952ea19b169935900fafcd
-
SHA512
bfaa70a54a47fbf567b8edb5243a912a25f36f47f9aa1c8465750794133ef6f1dff0272335ae5e6e712e20983359e046889b1c92a205779e65b8e5e6432b43b2
-
SSDEEP
6144:wpfuQk9o6dWgnrbAffnEQ4zgbjvqQZGgbtNk64dswMlZe6ickZk9SG/sQQxSVdrl:vddXAffsyjiQ5bT4izlEdcxPsQ/E0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.eb98ef9826ef1981e227ae07afb844c0.exe
Files
-
NEAS.eb98ef9826ef1981e227ae07afb844c0.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 446KB - Virtual size: 445KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ