Static task
static1
Behavioral task
behavioral1
Sample
NEAS.cc03527b5978ac2a68ed08f77571c670.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.cc03527b5978ac2a68ed08f77571c670.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.cc03527b5978ac2a68ed08f77571c670.exe
-
Size
14KB
-
MD5
cc03527b5978ac2a68ed08f77571c670
-
SHA1
1b824f4079e4e9facaae59476a38d6cf4e887538
-
SHA256
383d6ae1b591cfbe13d52c9ee9c88e448a3f4374a1b72652e07ee5e3c3d8b26b
-
SHA512
5c5386806d687d89b781e08fd4e81be442327049932419f777061ffbb4dcb9f07f3cb5f076174de8fe72b2a64ee18347fbfea6b131337f255829364a78a58c59
-
SSDEEP
384:C7VTQg8LPIIIIIIIIIIIIIIphZsyDE045HJOJOJOJO:gVTQhAvOJOJOJO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.cc03527b5978ac2a68ed08f77571c670.exe
Files
-
NEAS.cc03527b5978ac2a68ed08f77571c670.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ