Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d9b8d0f13b568519810d85bb7be5bd70.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.d9b8d0f13b568519810d85bb7be5bd70.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.d9b8d0f13b568519810d85bb7be5bd70.exe
-
Size
204KB
-
MD5
d9b8d0f13b568519810d85bb7be5bd70
-
SHA1
e65c1654e168fcb714cff6a62129ad52b194d2f2
-
SHA256
1060c20c18b9e184c056811789373cfd5b568b6308068445651de8c935cdf23a
-
SHA512
d2c2114fe897695ac1491c639d2c17b826c6a8a86ceb1c7dacda664ddf3c0c1739056056b74ecbd4c6690a6d76da5624a382386e28659e3646214aaab8458d51
-
SSDEEP
768:MAZHyGbLc+1ZGmooFNbasQiS/qEPQdhiZC3uvkuJ9mLtc4mc74GzMvw5/1H5yKG:MyHyGvx1qoXaa0ifTuJQBc3ccgggO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d9b8d0f13b568519810d85bb7be5bd70.exe
Files
-
NEAS.d9b8d0f13b568519810d85bb7be5bd70.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fldo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE