Static task
static1
Behavioral task
behavioral1
Sample
NEAS.dba8e5c1b053479e0147f32bf83f2880.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.dba8e5c1b053479e0147f32bf83f2880.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.dba8e5c1b053479e0147f32bf83f2880.exe
-
Size
204KB
-
MD5
dba8e5c1b053479e0147f32bf83f2880
-
SHA1
80ff08b51d63b510d0a4285bec94f9389af1d5ef
-
SHA256
4f90c678df881af32532d699448312e331f9f6a75a3eda980d1a0b815b803ddc
-
SHA512
8d6064f1fa98fe9e8ae37cb0ee51fc055588c0cb0b7163a250ae0d86797b7506c19533285e73ac9723d07786b787b107328f8fe7b204dc83d4394b6029e8d907
-
SSDEEP
768:m7u59DMINlN3lOBFkkvBHEfFRaDKX7F6fS/HI0PAyO6jPp/1H5UJaXdnhg:qu9IAiFkQs/aY7G2HJPAypLv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.dba8e5c1b053479e0147f32bf83f2880.exe
Files
-
NEAS.dba8e5c1b053479e0147f32bf83f2880.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fldo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE