Static task
static1
Behavioral task
behavioral1
Sample
NEAS.41d1804ed124eb5bf4ad31b5d59a3c80.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.41d1804ed124eb5bf4ad31b5d59a3c80.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.41d1804ed124eb5bf4ad31b5d59a3c80.exe
-
Size
2.1MB
-
MD5
41d1804ed124eb5bf4ad31b5d59a3c80
-
SHA1
bd545bd66d354d33a45cf935b3dbaceae7b225f0
-
SHA256
4db4f5bddac1f88a76ad69dff77fe050b64e96e949494655d9599108520a69ef
-
SHA512
423063d6465b64974e580d1854b1486e1ca3c3d8122207f715c0ec2ff74e0a3c0806d0f6dedc54612229249a37fe4722a84267d0d5f0ce2c57465794e3aac03f
-
SSDEEP
49152:MV7y7o7y7u7y7o7y7V7y7o7y7u7y7o7y7V7y7o7y77:MVm7om7um7om7Vm7om7um7om7Vm7om77
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.41d1804ed124eb5bf4ad31b5d59a3c80.exe
Files
-
NEAS.41d1804ed124eb5bf4ad31b5d59a3c80.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 104KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ