Static task
static1
Behavioral task
behavioral1
Sample
NEAS.dbf157b9b836bbf1cd929e3545049430.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.dbf157b9b836bbf1cd929e3545049430.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.dbf157b9b836bbf1cd929e3545049430.exe
-
Size
80KB
-
MD5
dbf157b9b836bbf1cd929e3545049430
-
SHA1
65ebeaad79fe8e727f5fb086de1406cf36cc818a
-
SHA256
4bc6bd4da6478338bebde88992c1c49a02bd4b362744f2c1917c15b6944cd699
-
SHA512
122479c7c7d7061539df497a3d0ec757352a4ebb6a0159ff7c85752cd22ac49ce60410d1aa9828dcaa1ecd035a89839992efd08378d12f6c69a06e2c7df8a410
-
SSDEEP
1536:jdLW4Bv1yy50zIyXfRPlpRciQlS7exM8deXL6zDfWqdMVrlEFtyb7IYOOqw4Tv:8Ov1yy50zIyXfRPlpRrQg7+S6zTWqAhK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.dbf157b9b836bbf1cd929e3545049430.exe
Files
-
NEAS.dbf157b9b836bbf1cd929e3545049430.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fldo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ