Static task
static1
Behavioral task
behavioral1
Sample
NEAS.e49275750cec4e68b48878982ff25bc0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.e49275750cec4e68b48878982ff25bc0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.e49275750cec4e68b48878982ff25bc0.exe
-
Size
1.0MB
-
MD5
e49275750cec4e68b48878982ff25bc0
-
SHA1
28f325715626da0c71c1e183de22d124208f00dd
-
SHA256
a6bb696a2dfc102b2fcc6e3ca8291123b71a593f55c2de507c2259bf47ab89ad
-
SHA512
8da98ad5f7581f5511e99116e189d5699a121bcf819b44a396ad83a46a716282a3db4c991bacf9da89f939bc34e3414432c51e46a9a01fd3c190cafde86b601c
-
SSDEEP
24576:zzqxG2Z9mIhQvq8wd7sNE6phFrC7rymrrGcsX9PE1DiK:XMmSdp2PCKEZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e49275750cec4e68b48878982ff25bc0.exe
Files
-
NEAS.e49275750cec4e68b48878982ff25bc0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ