Static task
static1
Behavioral task
behavioral1
Sample
NEAS.ffad4e46b11a9f74fcd7042676d5c6c0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.ffad4e46b11a9f74fcd7042676d5c6c0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.ffad4e46b11a9f74fcd7042676d5c6c0.exe
-
Size
14KB
-
MD5
ffad4e46b11a9f74fcd7042676d5c6c0
-
SHA1
c191448bbb40bb0223ef0d8fc76840ad7fbcb416
-
SHA256
22a47739d9d390df0fbc0497a789cd5cd7a4ed9d60aebcba5d6a46e7ecf73b0b
-
SHA512
aeff80784b5b17799665903df76fce071697d52749379d6eea3dfbc3352f162898cc343025e2f57c5888560b0e23bcb3b70b431349ae2ae16573c7df44e8c4db
-
SSDEEP
384:AX+L6m0umdJsfx4U7CF3CAFRqIFiFVIDE045Hw5555:zL6m0umb8Z+HmvSA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.ffad4e46b11a9f74fcd7042676d5c6c0.exe
Files
-
NEAS.ffad4e46b11a9f74fcd7042676d5c6c0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ