Static task
static1
Behavioral task
behavioral1
Sample
NEAS.c3244173863d1617a212d2ffda8aeb00.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.c3244173863d1617a212d2ffda8aeb00.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.c3244173863d1617a212d2ffda8aeb00.exe
-
Size
212KB
-
MD5
c3244173863d1617a212d2ffda8aeb00
-
SHA1
8c797a467810965658bdd70e84ea45a30dccda94
-
SHA256
98febdf0dd3213deb90ac0865be33b4994edb0d92ec433d98a3f90dc5320bb0a
-
SHA512
fbabdf453860397080e37cb3c332cb9457d77c5a697ee8052686fe1470e6a3d4b6f4b2e6e7b694cd8a95d0d53127731b899ac2e792b6e46947b8baec5eb4046e
-
SSDEEP
3072:+/TMo4n0bOWJg6ydOGWTdJ6S7/KyoBi4wju7:+/YhnmdK9ddWj6S7f6i4Cy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c3244173863d1617a212d2ffda8aeb00.exe
Files
-
NEAS.c3244173863d1617a212d2ffda8aeb00.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 105KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE