Static task
static1
Behavioral task
behavioral1
Sample
NEAS.f5c519a63a7b2b0a1e57127eade43330.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.f5c519a63a7b2b0a1e57127eade43330.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.f5c519a63a7b2b0a1e57127eade43330.exe
-
Size
392KB
-
MD5
f5c519a63a7b2b0a1e57127eade43330
-
SHA1
c71f22a570ee78fd14848241b7032c3440409bfc
-
SHA256
e8b03e9dcdc296733f6d7c00e3d50e950f225b5af63e4b8ae8c656441c3235ac
-
SHA512
591837eac18ba2b2dc1ad833e9467db633802f6c390b84d7a29f617ba162721e41f6c92b79f658932801ad98e634d98f64f95dc7753cc85ee5f2e3eefd1ad5c7
-
SSDEEP
3072:/1VMfMIbIaw3J9FQxVSN/+BC3K5eqU+BC3K5eqYroGL2m6zo61t:/gfMmM/QzIK70K702
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.f5c519a63a7b2b0a1e57127eade43330.exe
Files
-
NEAS.f5c519a63a7b2b0a1e57127eade43330.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 129KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 488B - Virtual size: 488B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ