Static task
static1
Behavioral task
behavioral1
Sample
NEAS.a1c14309d959751f8c90f6b7631deff0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.a1c14309d959751f8c90f6b7631deff0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.a1c14309d959751f8c90f6b7631deff0.exe
-
Size
4.0MB
-
MD5
a1c14309d959751f8c90f6b7631deff0
-
SHA1
f174ce1e91fa701ab9b05111715b8bd510fd6c9f
-
SHA256
9aca392c885760f0e255fcce43e832d4d71fdf5ca4af3dd6b59ae4c9f37bbe3d
-
SHA512
7f02c0b4a31d8427a11431ec047dfb540c27c9febf2ab49a89583585a18f640ed347913900a911b160418141f5dda2448a4f90e956ebe051c3ad3914bebdf569
-
SSDEEP
98304:dIiqp/+yulzhzgss5JR3K0F/TT2xDJLu3BlFQ4E:daV+Nl1UJRfTCx1SLE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.a1c14309d959751f8c90f6b7631deff0.exe
Files
-
NEAS.a1c14309d959751f8c90f6b7631deff0.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ