Static task
static1
Behavioral task
behavioral1
Sample
NEAS.b26266198a8718a0584d9ff8c2691960.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.b26266198a8718a0584d9ff8c2691960.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.b26266198a8718a0584d9ff8c2691960.exe
-
Size
124KB
-
MD5
b26266198a8718a0584d9ff8c2691960
-
SHA1
113c40be34f9f22c05b72860b54cb835ff0cd243
-
SHA256
527e13c1181a1319fe58b6524aabc08b6fc9b69b2f55f0691cff546b761d3413
-
SHA512
df18be4712565db70086ce6c66dad349be9336197614c42834a8943933504644ee1a0a5f354a735f67ec772135b6df4b673a9bfe73c880c23f14034ce2a3fa53
-
SSDEEP
1536:TICxr60IO1m7aOXEIEAZ+xysy4Y5msf4IDEEG2AV/PmpmmUlG:TICxrhU7aOXXyO5msf4ID+2C3mpmmUU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b26266198a8718a0584d9ff8c2691960.exe
Files
-
NEAS.b26266198a8718a0584d9ff8c2691960.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ