Static task
static1
Behavioral task
behavioral1
Sample
NEAS.cf684bb303f18a371936bf0e21d08540.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.cf684bb303f18a371936bf0e21d08540.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.cf684bb303f18a371936bf0e21d08540.exe
-
Size
14KB
-
MD5
cf684bb303f18a371936bf0e21d08540
-
SHA1
befa20bb2573281f81f3c9c4b987c426908a18dd
-
SHA256
a94da451c249e8af0323615343aaf1e48999fdb342d9a9c7e7b18be99ca97cfd
-
SHA512
b4628c14091b4174278ba513264f2b8d2c566c96bef2a24a10ec10bbd54cce9b7f738c0ed4bd538895acc0a3b500f2ad8a008ed84af1e72d4ca5f817dcb3e8f6
-
SSDEEP
384:kB7zQ5h7y0Pfa3J+srGxZeNcmo46PzDE045HP/K/K/K/K:kCB5feJ1iZeuECvARyyyy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.cf684bb303f18a371936bf0e21d08540.exe
Files
-
NEAS.cf684bb303f18a371936bf0e21d08540.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ