Static task
static1
Behavioral task
behavioral1
Sample
NEAS.db963b453f0c0c66052606d9c90d3fc0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.db963b453f0c0c66052606d9c90d3fc0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.db963b453f0c0c66052606d9c90d3fc0.exe
-
Size
42KB
-
MD5
db963b453f0c0c66052606d9c90d3fc0
-
SHA1
789ca8d9be3b83713d9585f97496615f86b5f272
-
SHA256
41d5cc356943a59b735c3fce4f0d32a7d9ab9de195089cdbc387ec54dc79a2ac
-
SHA512
dcefdb480067becbfc779e6aad02e53b6916fbffcfde1bb127fe6e9c85bdde8ed82b44c4b996d255b64ea901b73094a81eb34d137dda34511f39164be2490df7
-
SSDEEP
768:CcLbl9wEmpJ76kS4iapYkRgATJ8F9mkpeKJ6f+:B1uVC4mGyFAkLs+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.db963b453f0c0c66052606d9c90d3fc0.exe
Files
-
NEAS.db963b453f0c0c66052606d9c90d3fc0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 476B - Virtual size: 476B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ