Static task
static1
Behavioral task
behavioral1
Sample
NEAS.dbaf6c5613d77c1399d28f09053b27f0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.dbaf6c5613d77c1399d28f09053b27f0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.dbaf6c5613d77c1399d28f09053b27f0.exe
-
Size
111KB
-
MD5
dbaf6c5613d77c1399d28f09053b27f0
-
SHA1
2ed71aabb0ca4d05a848584b42c596babff6fc19
-
SHA256
69fbbdae2e6bf7374fcf4472ee67e0a98ae4d36ba96bd1d19babfbb0cb94ea87
-
SHA512
605fda994fd4ccb5fed13e049a23bbbf6f1446c9116a0ddc71ef23d6c1d639d618da5de43bec96f09c2705e1efff34d7e7b55c1c617bb1a2e98e9704b5a67058
-
SSDEEP
1536:jvq9fTx52KbwO7y0nMJtBu/vVceanxe+vVshQ5/Wky7jgN:jGfTxUKsOHn6tBuXrAe+meOzjm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.dbaf6c5613d77c1399d28f09053b27f0.exe
Files
-
NEAS.dbaf6c5613d77c1399d28f09053b27f0.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 81KB - Virtual size: 504KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE