Static task
static1
Behavioral task
behavioral1
Sample
NEAS.b0410613ea19fdace9014bb490cff580.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.b0410613ea19fdace9014bb490cff580.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.b0410613ea19fdace9014bb490cff580.exe
-
Size
14KB
-
MD5
b0410613ea19fdace9014bb490cff580
-
SHA1
bf318bedfcc673f03aa66e96a5df375e5d034db9
-
SHA256
c6adb42ce98c5c3c3fdec8c2a345d410d0e99a223617310bb8596658022bbadb
-
SHA512
d5cb00b25056b6a7f13f2c44bc65925f4a5c9cb4ce0e8580cd7c7eea1a7914962677ab6b2ff5a2c0a06f87560ac5c40ef1625f64aec9dffb65734b718ac55ef4
-
SSDEEP
192:JVdyqZK9wzVqb6dN0ikCUS1qDE045HQ7RRRR:PdjK9OVbrBPMDE045HARRRR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b0410613ea19fdace9014bb490cff580.exe
Files
-
NEAS.b0410613ea19fdace9014bb490cff580.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ