Static task
static1
Behavioral task
behavioral1
Sample
NEAS.05ef1485c9fcd48e7672e0cb2fc6ce80.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.05ef1485c9fcd48e7672e0cb2fc6ce80.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.05ef1485c9fcd48e7672e0cb2fc6ce80.exe
-
Size
320KB
-
MD5
05ef1485c9fcd48e7672e0cb2fc6ce80
-
SHA1
c80561c162ad361b9673a644796d98cfa3ccf859
-
SHA256
d546e61fbc1ce36a8c9cf4f7a25bb7f6fb9c0f3838fee8609d1829071d654660
-
SHA512
452fc34861728bf263057c6613e9a3eeb9c8abb9137e87b6cace586ebad72f9176fa31888fc89db2157787a51dc7a9ea1e1193b85867e9ffdce06657b5d12ec5
-
SSDEEP
3072:v1lYxWpd54BaHI9Scb7qA0UXEfhEYbzPCTVZR3AWijGnvrwZ7M4W5NjapLNnkISt:deHwXUU5EYCTvaBj2GML5NjcxFSt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.05ef1485c9fcd48e7672e0cb2fc6ce80.exe
Files
-
NEAS.05ef1485c9fcd48e7672e0cb2fc6ce80.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 185KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 116KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE