Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d92a88ba780acfa476e00b8d3b84f2b0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.d92a88ba780acfa476e00b8d3b84f2b0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.d92a88ba780acfa476e00b8d3b84f2b0.exe
-
Size
52KB
-
MD5
d92a88ba780acfa476e00b8d3b84f2b0
-
SHA1
a854dad47a9dbb21b676654ee81825dcec0700e0
-
SHA256
a498e56dd0aae6f5b105a30b4dade37810a0298088adbd89bc02f2b0365cdc04
-
SHA512
b509a8c98a80788913c3b3474c1a2b50e6083310da40b5c0d01eab1d2d48e21d58d3586c758f3d4ad340083534f451df02f445fef0d6d6bc581f5aee2f3ebaf5
-
SSDEEP
768:LxZ+fMGgwlMddyYFFQ6h3jslHP4CKhzocgGOCnd58/1H5F/sPAMABvKWe:LxZuMwOdggWP4CKxHdndshMAdKZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d92a88ba780acfa476e00b8d3b84f2b0.exe
Files
-
NEAS.d92a88ba780acfa476e00b8d3b84f2b0.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.embm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ