Static task
static1
Behavioral task
behavioral1
Sample
NEAS.dd0092c88e367f5c62cba2927b3872e0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.dd0092c88e367f5c62cba2927b3872e0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.dd0092c88e367f5c62cba2927b3872e0.exe
-
Size
311KB
-
MD5
dd0092c88e367f5c62cba2927b3872e0
-
SHA1
0fdf736fe25bb30b0a50f3ff4ddd43ed2a836a2d
-
SHA256
dce5346804f10c49cfe2793ac2f91e7c157b54225a833002b96c7302f051cc89
-
SHA512
fecc1a7e34f9160b5c579ebe613ea10864d1711bc141013467524c2951e52e9e0b17230ad905dc648e3bfda0027e55b2b06e2906689e682eb97ace2da4d18016
-
SSDEEP
3072:9twizQTj8CSUYf8W3nSjen++Bj88OZS0/Qe2HdOLlqw1aQBlZJ/fdk3:Xuj8NDF3OR9/Qe2HdklrBHJ/f8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.dd0092c88e367f5c62cba2927b3872e0.exe
Files
-
NEAS.dd0092c88e367f5c62cba2927b3872e0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE