Static task
static1
Behavioral task
behavioral1
Sample
NEAS.b267687ad412290cb7cf82d606e031c0.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.b267687ad412290cb7cf82d606e031c0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.b267687ad412290cb7cf82d606e031c0.exe
-
Size
14KB
-
MD5
b267687ad412290cb7cf82d606e031c0
-
SHA1
de8a473afb134dd62daafdb138ec0b65d63fe020
-
SHA256
0bd6932b49bcb1a26ecbd6826ccbf3f078cc127fd8b73cf304bd3710b14c64a9
-
SHA512
f58ac129a4a8928d8f9992c9f5548a14e727ba817c094a4e782e38472751fc00c9b9d46ebb376361e84afa5329a59a94cb586130cd86a5f52b4ed28e0477215f
-
SSDEEP
384:NNBkgTHpA2651KFklb/r54irpDE045H/j9M+M:qUS2McK7rWirJA/M+M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b267687ad412290cb7cf82d606e031c0.exe
Files
-
NEAS.b267687ad412290cb7cf82d606e031c0.exe.exe windows:4 windows x86
bb7f3709b38ba0516619c87472165967
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvbvm60
ord26461
ord2764
ord4768
ord1039
K�� 8�����T7
ord65535
ord65535
VBVM60.DLL
�r���rHJ�r�I�r�r�r;ġrr���r/p�r�b�r}A�r�}�rġr�V�rlW�r���r� �r ár]��r:�r��r���r�G�r�}�r��r��r��rV�ru�rH�r}i�r+��rg��r=�ruB�r�:�r7��rV�r:�r:�rJl�r�ڡrl�rn�r��r���r�5�r/N�r�ơr�m�rף�rpu�rѷ�r�m�r���r0l�r r���rD��r�ơrݢr�k�r r���rD��r�ơrݢr�k�rݢr�k�r�� fqbf@�f�`f-�fm�fĊf�� f��f�`f
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ