Static task
static1
Behavioral task
behavioral1
Sample
NEAS.224ca2de820439f3d2580f1053b0fb30.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.224ca2de820439f3d2580f1053b0fb30.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.224ca2de820439f3d2580f1053b0fb30.exe
-
Size
90KB
-
MD5
224ca2de820439f3d2580f1053b0fb30
-
SHA1
1c037844108d5abad844190a59d80d7aa711e69e
-
SHA256
4ead4937b9fede0526709a9cfcbd9419846e3507cc48b0fd0e1d687dc99d26fe
-
SHA512
d8418b4b8e54a9b3a20e5caefd24d76f2ffb240f7739db8ff9f7c56481fe2ccf96d39a5fb0c2e5c8c70411a9e2bd7d76dbd5d58f07bc57cea283e9f2eb7fdf45
-
SSDEEP
1536:s1riKjtcZIFqCGvjLMgRx0WtCUseiRK/L+FHxhXpYqbbOv/G7u/Ub0VkVNK:kriKjtcFCunME0WtC6QKD+FH9YP/G7uj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.224ca2de820439f3d2580f1053b0fb30.exe
Files
-
NEAS.224ca2de820439f3d2580f1053b0fb30.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ