Static task
static1
Behavioral task
behavioral1
Sample
NEAS.bb84bf8b01085cc362d3efc0d9d87320.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.bb84bf8b01085cc362d3efc0d9d87320.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.bb84bf8b01085cc362d3efc0d9d87320.exe
-
Size
229KB
-
MD5
bb84bf8b01085cc362d3efc0d9d87320
-
SHA1
8e6df55d70d1c463035bb1753c4d4b9114177e99
-
SHA256
5dc075ff6d46482974d3617e785d48cfe566880426a60a21ad4ef98c1b5f260a
-
SHA512
7a89bebbca16e56a4ab9ad05b2bee7c02c325e297b5b0b8f5acbc7a24252558f506d0e129e2aa2275a6afb0e2de7e66a9169f489cdfdae527891ff6791690208
-
SSDEEP
6144:afkxq86Jwa4t/gmx/zGhlKLzdWfp1yVg38jiyFwiwaVTHnH6a:nq8lTtomx/SKLzdWfp1yVg38j5OBatnf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.bb84bf8b01085cc362d3efc0d9d87320.exe
Files
-
NEAS.bb84bf8b01085cc362d3efc0d9d87320.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 353KB - Virtual size: 353KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ