Static task
static1
Behavioral task
behavioral1
Sample
NEAS.c1188d5e3ac468d720feb5f23baaa080.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.c1188d5e3ac468d720feb5f23baaa080.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.c1188d5e3ac468d720feb5f23baaa080.exe
-
Size
472KB
-
MD5
c1188d5e3ac468d720feb5f23baaa080
-
SHA1
6400a922c9cd23378b9a1d6211ceeb9760d956dd
-
SHA256
2919e36b90be895a442e1ffaa3d07cb3076e0b40edf8f8b2379d9d2857dc5c76
-
SHA512
9ccc4d8dddcaba799c15dd4417863e164843d4098af52a2ec40958e7ec2720de8f4419c9a1af70b5b1bc2b2cbc991b514816303219cd58f45c4d86c227fcdbd4
-
SSDEEP
3072:yw8RinudiP52xx67lLdIiHDotxZ3iRmzKJbLYmCTCJTl8GQGBVg:y1kgiPA6RyPtxtiRmmJ4mfSGTVg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c1188d5e3ac468d720feb5f23baaa080.exe
Files
-
NEAS.c1188d5e3ac468d720feb5f23baaa080.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ