Static task
static1
Behavioral task
behavioral1
Sample
NEAS.0ed932a804a8250b950d00d86288c950.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.0ed932a804a8250b950d00d86288c950.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.0ed932a804a8250b950d00d86288c950.exe
-
Size
14KB
-
MD5
0ed932a804a8250b950d00d86288c950
-
SHA1
e2956c1eb1b8a109e5ff29bce40a665dccc2c80b
-
SHA256
a01317e9666d73b233073a40225ce4ab8d9a5f11c47cc7b6b6b6ad8c6be67a5b
-
SHA512
7e86a2caae29c780a747b46fc89658cbc711c1e9f152d90d2979d941bf9202f440e2e5d28cd18768aec7db4957dfaf3f472f0d513c051f643ade1053bc14af6a
-
SSDEEP
384:J2slj2LpQHFfQSJTSYj4+Q8i5uzDE045HELLL:0pQVnq7qA2LLL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0ed932a804a8250b950d00d86288c950.exe
Files
-
NEAS.0ed932a804a8250b950d00d86288c950.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ