Static task
static1
Behavioral task
behavioral1
Sample
NEAS.0d4961c0873fef577b20678aab525f40.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.0d4961c0873fef577b20678aab525f40.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.0d4961c0873fef577b20678aab525f40.exe
-
Size
15KB
-
MD5
0d4961c0873fef577b20678aab525f40
-
SHA1
a13e291b4af5562ff1f79fd340b10181cb42ec9d
-
SHA256
0bf74c2b06c2ab246a04e33b5df39dfc7ee690b0ead9cd809ba07f7f671a3789
-
SHA512
bb5bf6ca32de5f773bab39b34f246496f4f1ad7ad39d67058457aa05b9702b796432066104e17b8e9b8e3aad489154dffca3cd0fb5a493f776b9ab8f8d348703
-
SSDEEP
192:+p5ZHKONOkY8D3IfF8QzwDWkADCoISC/ET4TRyVswuUtVFF35AqDE045HQkT:GrHKONOkMe5ikyCeb8TZCfvDE045H1T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0d4961c0873fef577b20678aab525f40.exe
Files
-
NEAS.0d4961c0873fef577b20678aab525f40.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ