Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d09977400d846dc30e0436158bd4eeb0.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.d09977400d846dc30e0436158bd4eeb0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.d09977400d846dc30e0436158bd4eeb0.exe
-
Size
172KB
-
MD5
d09977400d846dc30e0436158bd4eeb0
-
SHA1
e53afcc64e8568d9aba8a506bb4af2a46b1ba205
-
SHA256
023df8e09fabba3faac4a4eec1f645562015b5c28c2a988a6e08c8d397e03c65
-
SHA512
158c54fa2f60c720dbf866365abcee3e2a7b93287881b68c1a138a009d3c22239a82d9069a02dffa5bb322904d204badfec5d977fd9de04c66629f1884a3c043
-
SSDEEP
3072:djzhZWxivgmhbI/pqqsFUCN3R96lI+2u8kj7EiSH4Tzalm6S5Iv+l6k3K+:dXC4vgmhbIxs3NBJU8ozaE6SC+l6k3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d09977400d846dc30e0436158bd4eeb0.exe
Files
-
NEAS.d09977400d846dc30e0436158bd4eeb0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE