Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d201de31693e606c34475a3fcdadcc50.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.d201de31693e606c34475a3fcdadcc50.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.d201de31693e606c34475a3fcdadcc50.exe
-
Size
536KB
-
MD5
d201de31693e606c34475a3fcdadcc50
-
SHA1
d34e4c06c638737a7034700b51cd7bc376b60865
-
SHA256
d7f36b7beba8522bff430ef150084b3e08b5637d016fc4122cc279fd636cc09f
-
SHA512
8d0494697ad04b27995df31b4b4969ce6266623ef759f2f5985208ea4405fec84cbe16610470de355d09ef8b71ebf5084f8baf099334d88176f3befa1bef3aaf
-
SSDEEP
12288:zJMxy+7SM0ZWXe3B3s2G9ghWEXVElydwnPyofNesXk2TZCmqp1ihH:z2wTMHe3B33dvl8wwnDNesXk2ToFpOH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d201de31693e606c34475a3fcdadcc50.exe
Files
-
NEAS.d201de31693e606c34475a3fcdadcc50.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ