Static task
static1
Behavioral task
behavioral1
Sample
NEAS.eddfa43c89509a3f1ca88393ebfc7ea0.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.eddfa43c89509a3f1ca88393ebfc7ea0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.eddfa43c89509a3f1ca88393ebfc7ea0.exe
-
Size
40KB
-
MD5
eddfa43c89509a3f1ca88393ebfc7ea0
-
SHA1
8cb0a3a814f7a7c977e4f3bb79b440df3f3243ed
-
SHA256
2de9c968a9a5ffe116972859eb472b0e1801aa28d1ea60887c8b6009ce25a582
-
SHA512
57c7b14bf33d4aa156c67bdf4bf8317c6b5057088c47a3e27a1c1c68c4b3081f80d12572eddee8e52da441a6b8fb3a031c9f09d07d2622820d2919bdea265e7d
-
SSDEEP
384:tz4tZ1CUp3u8JYBittUNVj4dx0JDE045H:tq1CnittUH4IpA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.eddfa43c89509a3f1ca88393ebfc7ea0.exe
Files
-
NEAS.eddfa43c89509a3f1ca88393ebfc7ea0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ