Static task
static1
Behavioral task
behavioral1
Sample
NEAS.f5002d35558d90f709aa348ac9110c40.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.f5002d35558d90f709aa348ac9110c40.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.f5002d35558d90f709aa348ac9110c40.exe
-
Size
14KB
-
MD5
f5002d35558d90f709aa348ac9110c40
-
SHA1
a94326f35597f36510de6a1c79479f87f65b593a
-
SHA256
ce4a25f017080aff4aaeb6222af3b58ccd81e52cde16ce090dd2172587e8a04c
-
SHA512
a6aa40e6a111e7f63aba126a0a2589216903dcdfeb8216a978f71efb1fc372fe74b0559fe6cc7f20a4616d7a4de315537d4a7e3f56d19f00d7aafee88b8ac624
-
SSDEEP
192:DFL9DL5ZU+VPttttQYYYYYQQMRq35qDE045HQFwwww:xHbVYYYYYY9Aq3QDE045H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.f5002d35558d90f709aa348ac9110c40.exe
Files
-
NEAS.f5002d35558d90f709aa348ac9110c40.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ