Static task
static1
Behavioral task
behavioral1
Sample
NEAS.dcd78e7d9797c469454c6d380b6d20a0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.dcd78e7d9797c469454c6d380b6d20a0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.dcd78e7d9797c469454c6d380b6d20a0.exe
-
Size
130KB
-
MD5
dcd78e7d9797c469454c6d380b6d20a0
-
SHA1
8aa72d79c156bff0ea5a7511cfa6977f4d99daaa
-
SHA256
79f103521d7cc0980f095ab3fe0d4e49f11db2dcbef88e3a06f1dfdef2029e1e
-
SHA512
8bf3b8a03540bbaca480fada3e62c074f276c423ea2a4e030e151dfc82881cb9c8fac9094eec3501c1e14ead04abbb51b99109fc84b8bcf2b27587c685442bd0
-
SSDEEP
1536:xwJAw8P1JH+bZSnQUAwQbgL4O1tyVBtcN9Lh/VJRCJwVOK3tnbqBDldHazJeLnfY:xiGJH+nUAwQ8/vJP1aB9awL3ubUl8WK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.dcd78e7d9797c469454c6d380b6d20a0.exe
Files
-
NEAS.dcd78e7d9797c469454c6d380b6d20a0.exe.exe windows:5 windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 124KB - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE