Static task
static1
Behavioral task
behavioral1
Sample
NEAS.NEASdd0fff6cc0e232fe3103aece8df32feaexe.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.NEASdd0fff6cc0e232fe3103aece8df32feaexe.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.NEASdd0fff6cc0e232fe3103aece8df32feaexe.exe
-
Size
69KB
-
MD5
dd0fff6cc0e232fe3103aece8df32fea
-
SHA1
6d4aa5a3a5c1b2060126f3f87eaf80ba612a66b9
-
SHA256
829afb88910fab1de95a0f2f8799364d3c17e91b8370018efc15ba8d7b0904e5
-
SHA512
7b93f814eb9440da5ae900327b17f20e0aff0b1e52747b39362fb499426f0120851e00c747d379ffb9d6e9b1ee4e337470e42e490f146fb095d312aea960ed73
-
SSDEEP
1536:1dpYfGxm2MBppppppppppppppG0gNein/GFZCeDAyY:1dyf5ppppppppppppppG0gNFn/GFZC1x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.NEASdd0fff6cc0e232fe3103aece8df32feaexe.exe
Files
-
NEAS.NEASdd0fff6cc0e232fe3103aece8df32feaexe.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ