GetHandleVerifier
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.c7f5942a362eedc9aa60af5f9e620620.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.c7f5942a362eedc9aa60af5f9e620620.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.c7f5942a362eedc9aa60af5f9e620620.exe
-
Size
3.0MB
-
MD5
c7f5942a362eedc9aa60af5f9e620620
-
SHA1
5d934f3ed1aba933055acae22b4da118a920c6fe
-
SHA256
70549987dd9f6fd35103e7bffc94c9326ce79b10c6b7a3249a90b94585c83abf
-
SHA512
b2dc1bab4b9773979409926758f382810c6b887c96b3f0e8039873ff8786d52d9e3feccf7ec9cd6eee7da7387ab3799537c6b82738040747d9bac8e1f8bb1d0c
-
SSDEEP
49152:FFh6y+A+VyajYgn9KH81ZsR1HoKP4nnH+AuckbB9z+r5u8QeHnq:FvojYgng81ZsPbP4nH+LNV0KWq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c7f5942a362eedc9aa60af5f9e620620.exe
Files
-
NEAS.c7f5942a362eedc9aa60af5f9e620620.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 183KB - Virtual size: 183KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 18KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.00cfg Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 149B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.voltbl Size: 512B - Virtual size: 184B
SHARED Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Shared Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.oli Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE