Static task
static1
Behavioral task
behavioral1
Sample
NEAS.db0bf77f1078ef04df2849f83ca0f590.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.db0bf77f1078ef04df2849f83ca0f590.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.db0bf77f1078ef04df2849f83ca0f590.exe
-
Size
14KB
-
MD5
db0bf77f1078ef04df2849f83ca0f590
-
SHA1
51fd3c9935d33e7fc6f8d932d378e43ac7ef4e06
-
SHA256
0b795f43cdb99d4c3eb57241ab16fdffc629c68b5415dddf2186fb68fe14ac63
-
SHA512
c2b9f9ba794c285a63bc00fa415421b0e71b0084c0e74440f5aa8f53b0324be00d00712d700294a4debe072037a5fb6a599a49fefb0035b64d80580025880ec4
-
SSDEEP
384:n7fX+rppCRSD1aaaaaaaaaaa0A5ZDE045H1qCqCqCq:n7uXkSs55A2TTT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.db0bf77f1078ef04df2849f83ca0f590.exe
Files
-
NEAS.db0bf77f1078ef04df2849f83ca0f590.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ