Static task
static1
Behavioral task
behavioral1
Sample
NEAS.eb5150b9be5b3430b70f114c94e78900.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.eb5150b9be5b3430b70f114c94e78900.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.eb5150b9be5b3430b70f114c94e78900.exe
-
Size
204KB
-
MD5
eb5150b9be5b3430b70f114c94e78900
-
SHA1
3e3762e6b684d1e4abb4bd84033303b23df924ff
-
SHA256
855642cd717901ce00fb759e61adb2093d272ed9a30871da986dff87b317528f
-
SHA512
b70318e405fd74aa827b698a6a5320b562f34095c70aeaf3f0a01059ac5bd7788c5d26f8562ddd7c9121cc09c1759e842ee0f4c6b057c323471e4d298031ae8c
-
SSDEEP
768:3uPrDtIW7nkKki4fMmJ/7Rv2o6BLykjOU5XD9s7OnAn8zErZ+8LSvlqMqf/1H51q:3KMZ77Rv8hBD9dgp5sgvlJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.eb5150b9be5b3430b70f114c94e78900.exe
Files
-
NEAS.eb5150b9be5b3430b70f114c94e78900.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jfbbql Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE