Static task
static1
Behavioral task
behavioral1
Sample
NEAS.b334ca2c20302a603c9655c18dea38d0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.b334ca2c20302a603c9655c18dea38d0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.b334ca2c20302a603c9655c18dea38d0.exe
-
Size
670KB
-
MD5
b334ca2c20302a603c9655c18dea38d0
-
SHA1
fe323080c5968835ca662cc792ece8af35f58633
-
SHA256
2a74a59486d7cbc6a5684d474c38f5b5e0420978f0294f12b9cbc917fbaef87b
-
SHA512
4b0a4777f69fc59021975841da7be2c746d2878b1f776d2385051978019b73755f6275362b032c08ab20b9a74f3cbb84fd92c2e01b6e2ce3dc297be6d19bc518
-
SSDEEP
12288:V1bW/zip2s4aSPkPJnhv4XLitRLIsra9dD43NzhT8OxzK5OVZP73:V1bGHhtU54OJIseE3NzSUZPj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b334ca2c20302a603c9655c18dea38d0.exe
Files
-
NEAS.b334ca2c20302a603c9655c18dea38d0.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ