Static task
static1
Behavioral task
behavioral1
Sample
NEAS.df1cb1091f2b7da13538326ee8cae5c0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.df1cb1091f2b7da13538326ee8cae5c0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.df1cb1091f2b7da13538326ee8cae5c0.exe
-
Size
15KB
-
MD5
df1cb1091f2b7da13538326ee8cae5c0
-
SHA1
a3f1fde46075762b8580b012eb4241ef3b740397
-
SHA256
bde58a5d8da4e7b00e819afa2905d28e88f837e9b782d34475b2a046cb902e4b
-
SHA512
77ab2ea582ce6e936b6b5c3d2f6754cee00ee041f5b96a3b60b79b42abe1391f04d307afa68ce324d2bc5c6110345628a4d43fc0c914be0eb1d467056baaa1e0
-
SSDEEP
384:6Yh7rN0Ww3oKwlyHfQp2y6p0HI8AvIDE045H6lXDulXDulXDulXDulXBT:LZrwYV0PpExAAXGXGXGXGXB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.df1cb1091f2b7da13538326ee8cae5c0.exe
Files
-
NEAS.df1cb1091f2b7da13538326ee8cae5c0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ