Static task
static1
Behavioral task
behavioral1
Sample
NEAS.99eb5f36364e6a8aaa187ba568d20900.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.99eb5f36364e6a8aaa187ba568d20900.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.99eb5f36364e6a8aaa187ba568d20900.exe
-
Size
385KB
-
MD5
99eb5f36364e6a8aaa187ba568d20900
-
SHA1
45b7c9929e608620c2e99f7c22982ddffc96f76d
-
SHA256
8b50b45c6f9cef1984c0eab818cd766e709239c8ca76be9ccc2c9646d34ad21e
-
SHA512
6f9bfdfb0c589ab1341ebda5b3646659c8a8eda41060f450a8c6a6dea52d69fa7ecb09fb4d08d65b68597a02f4dbbf0fb3f7e53a420ae2a52f037d2e3214231d
-
SSDEEP
6144:IZUu42Ql4Ogt7yawZ8/cAQ0ZJm8xxN5dXXAOeGPZHmxjVplO:xxgtOawZ8xQec8zNvzZHipM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.99eb5f36364e6a8aaa187ba568d20900.exe
Files
-
NEAS.99eb5f36364e6a8aaa187ba568d20900.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 235KB - Virtual size: 234KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ