Static task
static1
Behavioral task
behavioral1
Sample
NEAS.dab7963fc5a5c815c35bccb414dbeee0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.dab7963fc5a5c815c35bccb414dbeee0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.dab7963fc5a5c815c35bccb414dbeee0.exe
-
Size
3.0MB
-
MD5
dab7963fc5a5c815c35bccb414dbeee0
-
SHA1
388e560a7dd5070028eea890211984335ccbb4d6
-
SHA256
3adcd37bef2c3478ff4fcd09a7d070e11f17d53779b767e1aa73c9ba40a6cc9d
-
SHA512
ff40e1ce106fc8cb4a91c242ec8300cd05c0af85af7b1e2e9b80b5c6fd775921d377d8aa36eb2a32e7dbb2e9d84b3635968c9a3fc6e6c4ba9eee8c58d3f01c2e
-
SSDEEP
49152:wqdLduUVoqzOegfwSpJCBP8zERyuJuj598CiwYpGH:w8Ju5qKqAEWFiEH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.dab7963fc5a5c815c35bccb414dbeee0.exe
Files
-
NEAS.dab7963fc5a5c815c35bccb414dbeee0.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ