Static task
static1
Behavioral task
behavioral1
Sample
NEAS.b6ca9ed791d9420a2c17e1792bf3b640.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.b6ca9ed791d9420a2c17e1792bf3b640.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.b6ca9ed791d9420a2c17e1792bf3b640.exe
-
Size
14KB
-
MD5
b6ca9ed791d9420a2c17e1792bf3b640
-
SHA1
d8d8439856f03fe9a473931d08d40ddd08db2baf
-
SHA256
8fc0e0ce911557d8a558cf4eba05e3796c7d4e16c8263aac9b2ab79e4b158685
-
SHA512
e76de0d413fb840b4dd471c8eb81660ab8707b8119cada2894690eec25cb463a587014f1972d050ab80c48aa5b259a454f562e76eea085ad11879dd7b2f4a150
-
SSDEEP
384:w6zRFERDpUDpUDpUDpUDpUDpUDpUDpUDpUDpUDpUDpfUDD5k6g3DE045HAdddd:jODiDiDiDiDiDiDiDiDiDiDiDlmk6gT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b6ca9ed791d9420a2c17e1792bf3b640.exe
Files
-
NEAS.b6ca9ed791d9420a2c17e1792bf3b640.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ