Static task
static1
Behavioral task
behavioral1
Sample
NEAS.06d6c5c7c5064139f2a780c6f55d2f20.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.06d6c5c7c5064139f2a780c6f55d2f20.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.06d6c5c7c5064139f2a780c6f55d2f20.exe
-
Size
14KB
-
MD5
06d6c5c7c5064139f2a780c6f55d2f20
-
SHA1
b88b729f7ab9a875388b3af76934ee87f50c7baf
-
SHA256
9f7fea14f140bb9e5f354f37d003633e33c07c968085c36a3d5fc694c3e56ea2
-
SHA512
f5bb1138177027b4155b3661c6a659af17e972cba7759daf9e0349ced0283a96f661c0eef85317b14439aa44c49af2da8a4216f3cc51f122da6bbbad833b4e88
-
SSDEEP
192:3VR0INbovE+0wJDw6ggggggiuQ/eO/qDE045HQx4444:3VRaDyuQSDE045Hg4444
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.06d6c5c7c5064139f2a780c6f55d2f20.exe
Files
-
NEAS.06d6c5c7c5064139f2a780c6f55d2f20.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ