Static task
static1
Behavioral task
behavioral1
Sample
NEAS.fa69631a663677d21358eee060c593b0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.fa69631a663677d21358eee060c593b0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.fa69631a663677d21358eee060c593b0.exe
-
Size
583KB
-
MD5
fa69631a663677d21358eee060c593b0
-
SHA1
e5f4d26ffc36ce945e38400df7b64394061a11e0
-
SHA256
5454b8fd27b8d879e3df0e04d7bbec66d043139fbb3255e7c2f6c303d0cd95a7
-
SHA512
f390f9e1b1b67fc9c47ee7bfce13ea86cfa65ede1d7bba0a5ba575a5f61ee5c44e4c5d40b47f0851142b4609cdb1ff181f762f79f084d9860d1b709043201bfb
-
SSDEEP
6144:UtraU9yAV1bVD7qVuZSY5p5imfZDBSZM5ZBBsH+MZgoZyXlChskxSjeVPVX5IdV5:waat9O6pMUD2MHB4+Kge6Ch3XdJDG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.fa69631a663677d21358eee060c593b0.exe
Files
-
NEAS.fa69631a663677d21358eee060c593b0.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 578KB - Virtual size: 577KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ