Static task
static1
Behavioral task
behavioral1
Sample
NEAS.beb3feae080519bb3e9df4c40c86c640.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.beb3feae080519bb3e9df4c40c86c640.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.beb3feae080519bb3e9df4c40c86c640.exe
-
Size
598KB
-
MD5
beb3feae080519bb3e9df4c40c86c640
-
SHA1
cd89da4e0a5ffd9770a6a693be6acf2875539254
-
SHA256
b4bea58fab848f0363e1bedcdf379933c70462ce1f6d9ab82e8505d6cf269a2f
-
SHA512
3ae597ddef86e2abef46f1f61c20744b48286ed3b43675879b71f264188b4b8d351ab306b6df2779c5275136ac928ac10bf924bd55cb6582a1396c684a9574bd
-
SSDEEP
3072:+CaoAs101Pol0xPTM7mRCAdJSSxPUkl3VqMQTCk/dN92sdNhavtrVdewnAx3wmVR:+qDAwl0xPTMiR9JSSxPUKadodHZTm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.beb3feae080519bb3e9df4c40c86c640.exe
Files
-
NEAS.beb3feae080519bb3e9df4c40c86c640.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 573KB - Virtual size: 576KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE