Static task
static1
Behavioral task
behavioral1
Sample
NEAS.5b0d7f8d5c046cc5266368a6763f8400.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.5b0d7f8d5c046cc5266368a6763f8400.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.5b0d7f8d5c046cc5266368a6763f8400.exe
-
Size
563KB
-
MD5
5b0d7f8d5c046cc5266368a6763f8400
-
SHA1
44604153144595b4ccc2681d1358dae87a12f9e4
-
SHA256
faad682968cb5a82a246d9e9e76332d36d5512dc66132f8b99ef195bf6af82c9
-
SHA512
309b144b38e302b54e3d49bfc61567fca92faccfaf051dfb52cbece0f6db94a02c16db5adcce4dc158c2bffe8bfd377101e483a8f65812c3af81c0977fef3ba2
-
SSDEEP
12288:MgOLxkWo1XiA+j5uz4Rj/byFVHLAbRotcYT0Iw5p7ig:MPLlbpA4Rj/YNADlTig
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.5b0d7f8d5c046cc5266368a6763f8400.exe
Files
-
NEAS.5b0d7f8d5c046cc5266368a6763f8400.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 395KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 159KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE