Static task
static1
Behavioral task
behavioral1
Sample
NEAS.dec212390bec651b1e3e0c88d0744a50.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.dec212390bec651b1e3e0c88d0744a50.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.dec212390bec651b1e3e0c88d0744a50.exe
-
Size
40KB
-
MD5
dec212390bec651b1e3e0c88d0744a50
-
SHA1
989c53ee645852f9a54710766747a0120afe07d9
-
SHA256
1865d71eb2a418f8ed4c9f54868044252c4d948f5602ffb47542bfdf6699d101
-
SHA512
0b26f88ed765cce923cd89a9e9ec592f0bf8bbe1d36095e8220b79cd8786e6b245a6d11a030d9042b9f83d021d7f9695150d448dbedee9dcc23499dc8b74d63a
-
SSDEEP
384:CRQiwOJbvNwpORf7nqLr/pw4qj1dDE045H:CiiwOfwkW/pw4GA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.dec212390bec651b1e3e0c88d0744a50.exe
Files
-
NEAS.dec212390bec651b1e3e0c88d0744a50.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ