Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d01a3453ab454df5b147d8a7edaa6310.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.d01a3453ab454df5b147d8a7edaa6310.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.d01a3453ab454df5b147d8a7edaa6310.exe
-
Size
68KB
-
MD5
d01a3453ab454df5b147d8a7edaa6310
-
SHA1
3593ac836bf80011661c7cecc8dec351b1ab5344
-
SHA256
d9a38139fb65836f15938bff5d79169bb36ba4edf7b7708a227a25c6a4c86ec5
-
SHA512
2aa808aa39bb3866d88e99ee9981d070e8ca2b1ddc39cd8ad72756eda7d1481acb52610a193aee48b3a8322fed8aaa887da721a1c7d2e5f3216a7c039d06667f
-
SSDEEP
768:QoixwqZOoQs1oRAqvQi+AFN2T63H8E9+3K/8Brvq:QvKqZZQs1ShQi7+20trvq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d01a3453ab454df5b147d8a7edaa6310.exe
Files
-
NEAS.d01a3453ab454df5b147d8a7edaa6310.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ