Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d02c9e346794896e39cdcdd26dfcda10.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.d02c9e346794896e39cdcdd26dfcda10.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.d02c9e346794896e39cdcdd26dfcda10.exe
-
Size
679KB
-
MD5
d02c9e346794896e39cdcdd26dfcda10
-
SHA1
c7b4c992a0808c02cfdfeeb9520a6b6fc1885d3b
-
SHA256
2f75bea6c6998d55d2091389a21c2e17ccde5db2a040919e6c96a92dc84596e3
-
SHA512
3444c884d135104fc9ea1f2077d48e815a4e242d62a21327ebc5a8d779cedda8936bde839562f839938ce15ec5983751213135cfdf641f69c57f6666d29f6e24
-
SSDEEP
12288:zJMxy+7SM0ZWEPZrkbYnGxRi0fIIyID9D6yN5u5tG36JCGRzNxH:z2wTMUBGxRdJTu5c0CGbt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d02c9e346794896e39cdcdd26dfcda10.exe
Files
-
NEAS.d02c9e346794896e39cdcdd26dfcda10.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ