Static task
static1
Behavioral task
behavioral1
Sample
NEAS.01e88f502fd5302fe13ab65eb8ba4c6f.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.01e88f502fd5302fe13ab65eb8ba4c6f.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.01e88f502fd5302fe13ab65eb8ba4c6f.exe
-
Size
44KB
-
MD5
01e88f502fd5302fe13ab65eb8ba4c6f
-
SHA1
8e09a57272474916cced93dc678863f5c54a524a
-
SHA256
b1407b9c4b4927ba4e58d02f37c5f6461d80ae474c2a793fc3955204082ea7af
-
SHA512
0567e9df6392c3bdee45b58cf7a774d28d1373a49438997665d634e82f2d7dd06c4c27c7f8f1321f4b6325daca55e68d52de46cd9e66995b4c7a77c6da19a568
-
SSDEEP
768:Tzx/mKtmRX1cR1r9FD0gFXlCQBYPgnMjsemN2N+M3d2+apkC4kl3D2BQ7D5wu:Hxg2J9FD0mV1mYGseS2NJ3dtpa3td
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.01e88f502fd5302fe13ab65eb8ba4c6f.exe
Files
-
NEAS.01e88f502fd5302fe13ab65eb8ba4c6f.exe.exe windows:4 windows x86
63bdc560787fb0932fe693d321661b8a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvbvm60
ord690
Sections
.MPRESS1 Size: 38KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE