Static task
static1
Behavioral task
behavioral1
Sample
NEAS.dc620e66cc0a9a13069507244804ff20.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.dc620e66cc0a9a13069507244804ff20.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.dc620e66cc0a9a13069507244804ff20.exe
-
Size
15KB
-
MD5
dc620e66cc0a9a13069507244804ff20
-
SHA1
2b002cdf0b9775c1c235ee9e69cf6d091d3ef00c
-
SHA256
074a94c1830ebeb431a97a3c9936a5a562eb0cfca3846a5c2355129c39930fb2
-
SHA512
4f21a23d0b1decc8d63c82960f1ebed144c3514c9b4c73fe93bb168eeab72204074d7396765bfc7d09d0afb30b3fd9b6218bb1b2d0e8b5d51d329d90b5aaa2bf
-
SSDEEP
192:Eww5ypnz0li3RqUAbJQ/bnqWCumZKMUD4Y5I+OmkQiyMtfqDE045HQQT:Va8zHoUA+DnqbnAOmuyzDE045HtT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.dc620e66cc0a9a13069507244804ff20.exe
Files
-
NEAS.dc620e66cc0a9a13069507244804ff20.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ