Static task
static1
Behavioral task
behavioral1
Sample
NEAS.b1aa0abe315dea1e241ee11f908c8290.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.b1aa0abe315dea1e241ee11f908c8290.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.b1aa0abe315dea1e241ee11f908c8290.exe
-
Size
188KB
-
MD5
b1aa0abe315dea1e241ee11f908c8290
-
SHA1
5898d46b6f5fc2ff992f8751dcf7d0daae7fa1e4
-
SHA256
6699e5bba095f9b664f6840a33ec334b6521a4586e31a0395fb891fd0e062eff
-
SHA512
dfadcdd2ba40768d2a2d441e09f620397bc1b8566d614cedc2c4ed46b65c34b1eff11f9c8c868d0f291af397a7d5262e54f7f2381cd70abd42e5ed3fdd796bbc
-
SSDEEP
768:w3Lhd8tLKqtV36JFBlKUdVwadHqhS6xyP2ka30HOZno/1H5:w3NEKAV36tkgKnyukaEsu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b1aa0abe315dea1e241ee11f908c8290.exe
Files
-
NEAS.b1aa0abe315dea1e241ee11f908c8290.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.embm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ