Static task
static1
Behavioral task
behavioral1
Sample
NEAS.0ad06020f6afe9cf64b6f88ca5689c50.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.0ad06020f6afe9cf64b6f88ca5689c50.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.0ad06020f6afe9cf64b6f88ca5689c50.exe
-
Size
14KB
-
MD5
0ad06020f6afe9cf64b6f88ca5689c50
-
SHA1
cfcadd517f93fbd7bf6203bfcc636c461452b60e
-
SHA256
e3feabfcb51ea3058f704a61ec956a1c993172019be0e784d1cbbb38edcc788a
-
SHA512
858f92dd264987943903233d404c51f037fed37591a7b7f17e0cbad2171709ac79ae651de105bdb4366a3adf5a3c9ab6589da1e6e673ca21a3fc33a88a865581
-
SSDEEP
384:P17AGHUsN6+8oUM7K7K7K7K7K7K7K7K7K7K7K7K7K7K7KaCZlr/mDE045H:P1EMjLUM7K7K7K7K7K7K7K7K7K7K7K7D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0ad06020f6afe9cf64b6f88ca5689c50.exe
Files
-
NEAS.0ad06020f6afe9cf64b6f88ca5689c50.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ