Static task
static1
Behavioral task
behavioral1
Sample
NEAS.b7e5623a243562a5505f2d1dee711294.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.b7e5623a243562a5505f2d1dee711294.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.b7e5623a243562a5505f2d1dee711294.exe
-
Size
90KB
-
MD5
b7e5623a243562a5505f2d1dee711294
-
SHA1
7268362f1d1d81d070270804c90db3b4d87aba35
-
SHA256
c6c671813e32b9ab1c71e4bbbd4e0a4ff50aa1555152045c15a8e5886a7c8111
-
SHA512
009683bd66eabaf1fdb8f337370c25911d67087ee184d90f97eac3bc0f73ed9e9c1559b96732eceeeb82d7b0f5f348486796219699923c0d1140034b7b882bc8
-
SSDEEP
1536:371QRKedgDH97OHbNCiLgcQ6M9Fm/T2+AfX/fOOQ/4BrGTI5Yxj:371QR6DH97OH5CiinF2/Af3U/4kT0Yxj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b7e5623a243562a5505f2d1dee711294.exe
Files
-
NEAS.b7e5623a243562a5505f2d1dee711294.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.pdata Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ