Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d1b81dc9d25235434d44ff8c84bc8060.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.d1b81dc9d25235434d44ff8c84bc8060.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.d1b81dc9d25235434d44ff8c84bc8060.exe
-
Size
786KB
-
MD5
d1b81dc9d25235434d44ff8c84bc8060
-
SHA1
3f725078796f4d21e64a9093bca3b32b8f6e100a
-
SHA256
3f9ff356f81ab924f559ef5770ab019fe3aa502dc2a2ee947a4f1b163425aa98
-
SHA512
f73bd560d92c78bb302ac6c18efe41a6356cf408d93728752e77d3f2592fb043b0391084d036da98fc03eb867bc6e0e019751bb8a407a0e02b79cc9d3761c436
-
SSDEEP
12288:zJF2Tx0P2uymYNpQmPImXSJqfuvVzhC3Gc0JSsSIaIm4neSn8x0Rr:zzqxG2/yKutApnTZIbner0B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d1b81dc9d25235434d44ff8c84bc8060.exe
Files
-
NEAS.d1b81dc9d25235434d44ff8c84bc8060.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ