Static task
static1
Behavioral task
behavioral1
Sample
NEAS.e5f6a90e00eb3bbdf5d7f9080d69f520.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.e5f6a90e00eb3bbdf5d7f9080d69f520.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.e5f6a90e00eb3bbdf5d7f9080d69f520.exe
-
Size
456KB
-
MD5
e5f6a90e00eb3bbdf5d7f9080d69f520
-
SHA1
30391e5475977b89ca7a0a017f44d44f522e7a5b
-
SHA256
b4f190a9040775e10b33f7d139ad4dc3b0ab69349978169c357f2d20c66ed37d
-
SHA512
07f3f70596665e6eb86d9971cdf9595eca2b0e687d00d7661cadc15482683cf5d3f405ec825045b66e555bd977813916197c41b76fb79913ff98bc8ea96c8670
-
SSDEEP
12288:zJMxy+7SM0ZWxevPMeRSau5QKJu9i2zIRDhq/Jc28VRdt3D:z2wTMcMn3hJmEc/Jc73T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e5f6a90e00eb3bbdf5d7f9080d69f520.exe
Files
-
NEAS.e5f6a90e00eb3bbdf5d7f9080d69f520.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ