Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d6998b0ba1bce846658a0a33cb5f84b0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.d6998b0ba1bce846658a0a33cb5f84b0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.d6998b0ba1bce846658a0a33cb5f84b0.exe
-
Size
63KB
-
MD5
d6998b0ba1bce846658a0a33cb5f84b0
-
SHA1
246cd8913203f65d299264f7df21010f37b2a15f
-
SHA256
956fa00311e4a629224802e60b1dcce6c2c085b823f76f33c6161b98a3202f25
-
SHA512
6e9eabd79e42121c0e7d01279029206bd587d13285c70d1faa598b415260078c45e593f374add2d6639f34d6dd24ae8aa517e77a13bce64220410110651c5d4e
-
SSDEEP
1536:OpdrOkFSVO1GcAC5xUp03sj+V9En9rjDHE:OHrOkYUYA9sjo9k9DHE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d6998b0ba1bce846658a0a33cb5f84b0.exe
Files
-
NEAS.d6998b0ba1bce846658a0a33cb5f84b0.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didat Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ