Static task
static1
Behavioral task
behavioral1
Sample
NEAS.dbfb96afa8239afcc3071acd07270680.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.dbfb96afa8239afcc3071acd07270680.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.dbfb96afa8239afcc3071acd07270680.exe
-
Size
356KB
-
MD5
dbfb96afa8239afcc3071acd07270680
-
SHA1
3e94541b8a92b5ed3a836f206610497721fbbcea
-
SHA256
a02f0b62a23e07edbf54a75f64e468e68416b86beb4cb697169852de1597fd45
-
SHA512
3b2c499679b38fb3e7d05b28ac9d0d3d1f95491b1b85ed9def938a1a0dc7429b61202bdd3b0ace9c57351120455e4ffd3ec1f89379f9eae79ae87463eaae42d2
-
SSDEEP
6144:MABgenuyVH0pwpMSB9cB6HZh1h+jXCHzpHXu2vOMzXcOSKr6d1DYS:lgenNVH0ppSlNh+jg9uKr6dqS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.dbfb96afa8239afcc3071acd07270680.exe
Files
-
NEAS.dbfb96afa8239afcc3071acd07270680.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
bAMsJ4T1 Size: - Virtual size: 686KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2OPLzPVG Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
M1rQsmtC Size: 332KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4TJw1sTg Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
MiMY1Rum Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ