Static task
static1
Behavioral task
behavioral1
Sample
NEAS.cf0adb8d0548834ede06277e3b2bdfd0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.cf0adb8d0548834ede06277e3b2bdfd0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.cf0adb8d0548834ede06277e3b2bdfd0.exe
-
Size
14KB
-
MD5
cf0adb8d0548834ede06277e3b2bdfd0
-
SHA1
c06cc81abcfd37a3c958ea12734277181a117b66
-
SHA256
d1be97a3936ee0f3653a898d20c2a8a8c6cbbde3c4351f8baa4f41d87eaa9190
-
SHA512
6d786fc9b1ed21935c02d6e1be7eb83c0108b957961029905536df53599e623a6a87dc8e330df8ca8294169ded650a8932511a6f756c03c498d58cc08ad0d3b1
-
SSDEEP
384:iZctLBtLlre+0xgRyp/65RfYqDE045HHEfEfEfk:+chBtLl2g8/6zYwAb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.cf0adb8d0548834ede06277e3b2bdfd0.exe
Files
-
NEAS.cf0adb8d0548834ede06277e3b2bdfd0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ