Static task
static1
Behavioral task
behavioral1
Sample
NEAS.c4137fa7592e44affaf28cb54700eb90.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.c4137fa7592e44affaf28cb54700eb90.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.c4137fa7592e44affaf28cb54700eb90.exe
-
Size
216KB
-
MD5
c4137fa7592e44affaf28cb54700eb90
-
SHA1
7c3cb703b44ea5bfab8d1dace28ad545aa988e63
-
SHA256
3c7037ea4061fb4ae8a11e6927dbabb2680c246cb254e0bcca6dcbc72314077c
-
SHA512
fda4bacd471d3e260c6d429cd111d5ec898f858fec8ba8e9486c415dd65e3fc4167a36bc405a8dc2f098ed3dd59990b8886036ca289f57222264c28965ebeeab
-
SSDEEP
768:DoX3TzM+uYiOdbathfql+Pyd+WnnLSOB7FWklh3fcGB1e:DC3Tg+Ddbat1ql9+GLBllht3e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c4137fa7592e44affaf28cb54700eb90.exe
Files
-
NEAS.c4137fa7592e44affaf28cb54700eb90.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.idata Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfcd Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
L\rfcW Size: 512B - Virtual size: 64B