Static task
static1
Behavioral task
behavioral1
Sample
NEAS.dbd7a28580b08154fa3764e2dde57a00.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.dbd7a28580b08154fa3764e2dde57a00.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.dbd7a28580b08154fa3764e2dde57a00.exe
-
Size
14KB
-
MD5
dbd7a28580b08154fa3764e2dde57a00
-
SHA1
0c3131e0e91233f59e7e499acb69013bc73e89e5
-
SHA256
f1649b5f264a87fdf934c5d0658a35dc08c5d89e5b0a60b168ca712686d36277
-
SHA512
ede0d9c233871ea27b6ba0d8865ae673e0b5355c116e27f8eebc8a10f36756798c5f3148237057b0b67f8b932b0fd4bf3bafcaf4d6d36570c2a6c23801a238c8
-
SSDEEP
384:UBor11RI/lUGvDsnXQFYnFVf4jwDE045H:UBorBsvmXfUGA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.dbd7a28580b08154fa3764e2dde57a00.exe
Files
-
NEAS.dbd7a28580b08154fa3764e2dde57a00.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ