Static task
static1
Behavioral task
behavioral1
Sample
NEAS.c9636261e1aaa5ddde723088320bb400.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.c9636261e1aaa5ddde723088320bb400.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.c9636261e1aaa5ddde723088320bb400.exe
-
Size
6.2MB
-
MD5
c9636261e1aaa5ddde723088320bb400
-
SHA1
36b77520b1420d8334e5fbf28e541c5c96b357c1
-
SHA256
d8b591b04feec5062ae9008324f9e6753cc41da6ceea8b257ccc45815c4c93ab
-
SHA512
2e78e0587077c8b335c4a0dfa6a89cd2d63f355e2793b322a8b21a8ee765fced781c69b18914a7ed2e6cc0cec1ebb1fa534958f0276490348ec0ec7c2f41443f
-
SSDEEP
196608:6b3bPk5HyC8k5h/wDdEoNiV4I/WWwA7mPQCsdVVb:6b3bPk5HPhJCIXb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c9636261e1aaa5ddde723088320bb400.exe
Files
-
NEAS.c9636261e1aaa5ddde723088320bb400.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ