Static task
static1
Behavioral task
behavioral1
Sample
NEAS.f07dcd493ce3b0d28656105a159b23c0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.f07dcd493ce3b0d28656105a159b23c0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.f07dcd493ce3b0d28656105a159b23c0.exe
-
Size
472KB
-
MD5
f07dcd493ce3b0d28656105a159b23c0
-
SHA1
e1c51bc01b183a633cf017ecbfc22b3c369ca2d4
-
SHA256
91c101b11206b5166230be06c51fda5a14a3754eca5de6e7fa22934626dfdc76
-
SHA512
3d6a7f788b6cb3cc1bca7fae827ffb4c7042c9e2a430b2a35a07a513b0d201c99aa9eddc7936bc939a32d1c31a4ecb25b2859b5c230fb101e6d85853b5e0fd3d
-
SSDEEP
3072:08RinudiP52xx67lLdJiHDoWjMQ/dETlYLP+bFW:RkgiPA6RfPG9IYLPu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.f07dcd493ce3b0d28656105a159b23c0.exe
Files
-
NEAS.f07dcd493ce3b0d28656105a159b23c0.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ