Static task
static1
Behavioral task
behavioral1
Sample
NEAS.db9daadd15cc9d478c336b6127a9fac0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.db9daadd15cc9d478c336b6127a9fac0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.db9daadd15cc9d478c336b6127a9fac0.exe
-
Size
116KB
-
MD5
db9daadd15cc9d478c336b6127a9fac0
-
SHA1
cf8afbc65e01a7a47107b628007476129fa60717
-
SHA256
76d87f41d32c1637e879af3d98468d54aaeb34b6d22ffe1df7e1772a4bd88a11
-
SHA512
1dd3a7f08aa65c1c31b2f0a74891896faf519ec674f9b9da9d1c68a123d58bd0ea7b0570f07c1fd1cc84a74eaabead3f3673f9b6de649e60706a21e236642d10
-
SSDEEP
1536:ozfMMkPZE1J7S6/PMj42VJEY4ujMepJtANuOAl0QQsIEySYndfc6QkAbtb:+fMNE1JG6XMk27EbpOthl0ZUed06QTR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.db9daadd15cc9d478c336b6127a9fac0.exe
Files
-
NEAS.db9daadd15cc9d478c336b6127a9fac0.exe.exe windows:4 windows x86
3c0e70bfa5f73f1f1cef484e2bcb5bf8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
user32
MessageBoxA
Sections
1614346 Size: 67KB - Virtual size: 564KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9536397 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4900659 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE