Static task
static1
Behavioral task
behavioral1
Sample
NEAS.e9d46c0b9dea03110253eda5a94efa50.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.e9d46c0b9dea03110253eda5a94efa50.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.e9d46c0b9dea03110253eda5a94efa50.exe
-
Size
440KB
-
MD5
e9d46c0b9dea03110253eda5a94efa50
-
SHA1
d179f5d3e0b9b28e140966182517acedd6f2c0ec
-
SHA256
d3b945b914e98fe59b27b3a7d1aadbd25cc3265b250a1d39fca7db19d4e7e3b0
-
SHA512
7f63a307b4593596e66c0fc785fc43aa1b1c37a50027790098d32d9018770b94e426a00adbde13684fa5dafd6ae97f711497cfe110d164d8d6a90b037d0d7e2d
-
SSDEEP
12288:zJMxy+7SM0ZWxevPMeRSau5QKJu9i2zIRDh2m4BgcWJpwx:z2wTMcMn3hJmEGBgc0wx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e9d46c0b9dea03110253eda5a94efa50.exe
Files
-
NEAS.e9d46c0b9dea03110253eda5a94efa50.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ