Static task
static1
Behavioral task
behavioral1
Sample
NEAS.50f630709e3247a52a32a77451c5ee80.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.50f630709e3247a52a32a77451c5ee80.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.50f630709e3247a52a32a77451c5ee80.exe
-
Size
212KB
-
MD5
50f630709e3247a52a32a77451c5ee80
-
SHA1
e68f43e9bba994f576fafb0be97627058dba399c
-
SHA256
ac8b65e18aefd45b0e9da3c114b673f848243c33a7e24ff9a7c417643c1f3bcb
-
SHA512
06cf29813f2e2d509cb9aef51b978c3ad8e3ea20dee127184050e5836884f5ac68896d968e8b074d0e9654e6f586de69161897ad1923ba12480f22234dcc0284
-
SSDEEP
1536:wn5dxI9ZEqZ9ijMi2Sg2pDteYgvyPCT0PTaDzoO0+OCUfWJbc9LF:a54ZEqbiF2Sx0PeT2zv0+OFWJbc9L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.50f630709e3247a52a32a77451c5ee80.exe
Files
-
NEAS.50f630709e3247a52a32a77451c5ee80.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 105KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE