Static task
static1
Behavioral task
behavioral1
Sample
NEAS.da97f071b604d8836e83c2d349ce1f50.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.da97f071b604d8836e83c2d349ce1f50.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.da97f071b604d8836e83c2d349ce1f50.exe
-
Size
354KB
-
MD5
da97f071b604d8836e83c2d349ce1f50
-
SHA1
fffb3e1c2a08c1f1f6c51289158296a20fc5c491
-
SHA256
5ad1c3ae07bcde562795afb65157f3a4fd7a8ff9a5c382c12b1101ad957be038
-
SHA512
720fb3d5e16cc89bb4d89fa016e1f925665679b231fd7da105e078dcb3dd799594eed1a6e6f3063ad05e341c617fd69922c9d3d6ff68768872d7e12f9988de4c
-
SSDEEP
6144:ayP5RCsOMgm9khUmKyIxLp3tTs8A9Y5CUmKyIxL6iUw:aE58FMgm9kh3kK9N36Uw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.da97f071b604d8836e83c2d349ce1f50.exe
Files
-
NEAS.da97f071b604d8836e83c2d349ce1f50.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ