Static task
static1
Behavioral task
behavioral1
Sample
NEAS.db16ee1b279d8e965d00106d7ed29110.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.db16ee1b279d8e965d00106d7ed29110.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.db16ee1b279d8e965d00106d7ed29110.exe
-
Size
14KB
-
MD5
db16ee1b279d8e965d00106d7ed29110
-
SHA1
d11740e8bbe0d6f6053757404dd4f5e176889d24
-
SHA256
71586dc58192be44d91ecad380bce950b13603baef6d338485a1646e82e41972
-
SHA512
3b579cf3694d8a9d7e79eb62d779751466083bf4e6baf40f3b90731542a250bc92d3d70532701a7d2ea3076b3bc9721c50ada18b5712a387432f58cb1ee0eb94
-
SSDEEP
384:s0ImoGohXQo6FdyReuls3kgkLVg8Ate9rDE045HUeeee:JoGTIReuls5cAaeeee
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.db16ee1b279d8e965d00106d7ed29110.exe
Files
-
NEAS.db16ee1b279d8e965d00106d7ed29110.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ