Static task
static1
Behavioral task
behavioral1
Sample
NEAS.ad0c58879b98df84c3ff74f5a8cb0050.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.ad0c58879b98df84c3ff74f5a8cb0050.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.ad0c58879b98df84c3ff74f5a8cb0050.exe
-
Size
40KB
-
MD5
ad0c58879b98df84c3ff74f5a8cb0050
-
SHA1
14ce08b746e4b27e524435fa05d292817ed2ac55
-
SHA256
715b6e7433256c38946088494874d8e0285741d302cea5b52311b4239ac4d5fa
-
SHA512
74605fe1caa62e215ba924de847cd4498644b4684776f0fb1c4e2c10b590f4fdd44a78ff8863df2d6c1b44d574ba64f61c681a6bc5be070880478ba8c44afa81
-
SSDEEP
192:4RLrgaZWpX0YAkemymZqoJuDsBHWwPNvHqDE045HQfnl+nlr:k3gqWpX0YAf9DsswPNSDE045HmlMl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.ad0c58879b98df84c3ff74f5a8cb0050.exe
Files
-
NEAS.ad0c58879b98df84c3ff74f5a8cb0050.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ