Static task
static1
Behavioral task
behavioral1
Sample
NEAS.b26f7a0aada6a889c011054dd1c0a260.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.b26f7a0aada6a889c011054dd1c0a260.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.b26f7a0aada6a889c011054dd1c0a260.exe
-
Size
208KB
-
MD5
b26f7a0aada6a889c011054dd1c0a260
-
SHA1
d081d464c258d40c61addb44499c53422667a9ca
-
SHA256
4d782d5ce8378e057fa406a0373a9d185c56bee23be0d23328af85303e6650eb
-
SHA512
71a86802c097000f0110e30ac6728b7032c77b64b006d7d011edfde5c9d3d6a97c9c4cfd1696d94d348c88d5b0d4a4444f2671b3a2ad7ba764a6436c0e0e9db1
-
SSDEEP
768:TpMeEXxR3F8UNvrJb0PztsYDpVLGc3HZWok/6pSyXkTySrT/1H5DXdnh:TqzXF8CvrJ4PBhDP35R4rhb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b26f7a0aada6a889c011054dd1c0a260.exe
Files
-
NEAS.b26f7a0aada6a889c011054dd1c0a260.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfcd Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE