Static task
static1
Behavioral task
behavioral1
Sample
NEAS.dffa4e689cfa546a4855d20ae4ee7e90.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.dffa4e689cfa546a4855d20ae4ee7e90.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.dffa4e689cfa546a4855d20ae4ee7e90.exe
-
Size
40KB
-
MD5
dffa4e689cfa546a4855d20ae4ee7e90
-
SHA1
b090c5dacfdde7a911877e2d2a0cdd9f441274ef
-
SHA256
34f827f9b2e42a4b396c23d4d6cc985ffaa3aea1aaa0f7e8448261cd3b3f6557
-
SHA512
b483afb789e8a77350ac78b1ec149d196f1f7fea51b9335bb91f614887faaa5bc6d75944f3adbee03228cc94d0230ff0e77e5459a8b9774352e28ba1eda9dc2b
-
SSDEEP
384:ZVSvEjCGrmUtZxoU58nSHn0gZVqrDE045H:ZVQ4CMmUDG8USHPqXA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.dffa4e689cfa546a4855d20ae4ee7e90.exe
Files
-
NEAS.dffa4e689cfa546a4855d20ae4ee7e90.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ