Static task
static1
Behavioral task
behavioral1
Sample
NEAS.500fb93c8f45f19296444f1902bac420.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.500fb93c8f45f19296444f1902bac420.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.500fb93c8f45f19296444f1902bac420.exe
-
Size
456KB
-
MD5
500fb93c8f45f19296444f1902bac420
-
SHA1
cc32d2b40db13ab0259e8f3c9eb3cbf62c163485
-
SHA256
bdfc8edfcfc0bdac259ab9f4306cdfe1644793603004305722d953dbe4a18907
-
SHA512
182e2d4ec20fd5401c2f34a8ead9be35c0d7c9c9783dc2195e7fbda17638ac249859fb7d58ac9929958a1b4c60d2a3124391da93eb1ab8bc2bdaac226017c451
-
SSDEEP
6144:zJFzjP25jSOoM10P2uR475Lx2oQY5CsLpJiwHPImXWIcgAnwXTvBmb+cMWGke:zJF2Tx0P2uymYNpQmPImXSPx4ke
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.500fb93c8f45f19296444f1902bac420.exe
Files
-
NEAS.500fb93c8f45f19296444f1902bac420.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ