Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d28e6f273a6d8daec74387e560358a10.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.d28e6f273a6d8daec74387e560358a10.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.d28e6f273a6d8daec74387e560358a10.exe
-
Size
616KB
-
MD5
d28e6f273a6d8daec74387e560358a10
-
SHA1
419f7e8eaeb4c88cca21add7af0b3b6b6b6b1e89
-
SHA256
af51e9eebac4ed998efd6db2bb55e60bb09b70f9aa5ceac061c258376b9b969b
-
SHA512
ca243732f30b8880c073f6abf58ffc888552bebe8e45b528a4934dee58b1032db75a56a8d5dd93bb519930533c08c39d41d7e5af96d8cb5542e9f3b8e02b7e68
-
SSDEEP
12288:pdFXHHkifdpD/phsq11eMLSPSuEeMVLAQWrKubcrOpCGVQ2tG:dH3lpjsq11BLSPSucVLMBbw8Cc/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d28e6f273a6d8daec74387e560358a10.exe
Files
-
NEAS.d28e6f273a6d8daec74387e560358a10.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 600KB - Virtual size: 598KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 4KB - Virtual size: 219B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ