Static task
static1
Behavioral task
behavioral1
Sample
NEAS.a5c18c0b3fd5a3168e297054cb0fae20.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.a5c18c0b3fd5a3168e297054cb0fae20.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.a5c18c0b3fd5a3168e297054cb0fae20.exe
-
Size
14KB
-
MD5
a5c18c0b3fd5a3168e297054cb0fae20
-
SHA1
511b0b5a8656fb811bde39924a165c9649919af5
-
SHA256
8e32446b96c05683a2acd870f6a501ba12814c1fa59f5868eabc413150648d9f
-
SHA512
de7d0ff8e39c9b3aabfecac7ee9c88623f3866706cfffc5a89577fd0fcce8726fdad831e20e2f881727eb4e067d89047709ec44b43a5e68f4ea8623b3f6f1957
-
SSDEEP
384:zireheV+UaDoN1DDDDDD2mkGMh4RDE045H:zi6h6+lDoN6G7hA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.a5c18c0b3fd5a3168e297054cb0fae20.exe
Files
-
NEAS.a5c18c0b3fd5a3168e297054cb0fae20.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ