Static task
static1
Behavioral task
behavioral1
Sample
NEAS.5d1bb4f4665f43d3f04474ae039e5c50.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.5d1bb4f4665f43d3f04474ae039e5c50.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.5d1bb4f4665f43d3f04474ae039e5c50.exe
-
Size
14KB
-
MD5
5d1bb4f4665f43d3f04474ae039e5c50
-
SHA1
6735bff408fefb1637c16b6158f8bddf4a5fa9d9
-
SHA256
11df81a5421789f0efd3b752ae784e3428fd6eb2dd3390e42fd8106ccddc325e
-
SHA512
0012c189d32dc79985fb72f685c507d0c85ece6174e23644c28edf4136731846a3d7964626b525b4ccdb5fe307b5c059282f8159e41ce2f51374730961c69769
-
SSDEEP
384:BNeN+ayzspZSuWsOY3gJFlRb1Ehc3SDE045Hdk2k2k2k2:neN+tzspZzQJFuKIAHk2k2k2k2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.5d1bb4f4665f43d3f04474ae039e5c50.exe
Files
-
NEAS.5d1bb4f4665f43d3f04474ae039e5c50.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ