Static task
static1
Behavioral task
behavioral1
Sample
NEAS.dc54ee8ca0a03c69cc00897886ec6c10.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.dc54ee8ca0a03c69cc00897886ec6c10.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.dc54ee8ca0a03c69cc00897886ec6c10.exe
-
Size
239KB
-
MD5
dc54ee8ca0a03c69cc00897886ec6c10
-
SHA1
11ae0fb0e0e275c1eae546b4ec91452febc4dba4
-
SHA256
0199d6ab1405c2f00357c70d51438f1b608920f5cd93cc2298780baccdbb0157
-
SHA512
cb6998ebbe74e2079aaf41ff40c5b78a66fe2e3a8ee1560c7cdfafac03ddd0a65025e17946273538065a724a7f5035c883df0b10d35d0c11ca3f866e639b21e8
-
SSDEEP
6144:aDOxZXrSHXUTsPmkkGbu7QtWJdkCGV8afBTNKRpN:lXa8s+LUdWXXGVhflNKXN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.dc54ee8ca0a03c69cc00897886ec6c10.exe
Files
-
NEAS.dc54ee8ca0a03c69cc00897886ec6c10.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
HWAxCMck Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DrtWJgcR Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE