Static task
static1
Behavioral task
behavioral1
Sample
NEAS.cf31944a21dd1808bcc4f6c57d241a40.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.cf31944a21dd1808bcc4f6c57d241a40.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.cf31944a21dd1808bcc4f6c57d241a40.exe
-
Size
14KB
-
MD5
cf31944a21dd1808bcc4f6c57d241a40
-
SHA1
c5a5db1b692fef79b2961d675a3cd1d0ad5989fa
-
SHA256
424358611c89411846918d7385a7553c8c8c56f7cdd0514bd8850c381ed14919
-
SHA512
d0f12f4fb0280d68442cc51fe38f56465d3946f4e9d8e1f2b457a50c115316573680d48d15aca334fec19feaeb70cabdb0f0be5d59f69f3fde654717f797320d
-
SSDEEP
192:dyy/Be9/KJSTzc98Q88zJcnkcnkcnkcnkcnkcnklZ7CDLi8iqDE045HQbgggg9:d9/Bi/KWg9NKXXXXXGQS8VDE045Hq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.cf31944a21dd1808bcc4f6c57d241a40.exe
Files
-
NEAS.cf31944a21dd1808bcc4f6c57d241a40.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ