Static task
static1
Behavioral task
behavioral1
Sample
NEAS.dbf8c6500ca7fddc66d5e806a5fdd550.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.dbf8c6500ca7fddc66d5e806a5fdd550.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.dbf8c6500ca7fddc66d5e806a5fdd550.exe
-
Size
14KB
-
MD5
dbf8c6500ca7fddc66d5e806a5fdd550
-
SHA1
ce4352a815c0f053be61a9e3a3d9f05dfb2ed654
-
SHA256
931f2e3b371c617c6637622d71bb86244013118e0bf61877f973e0cf8ada8075
-
SHA512
75d6894bbb6e13f261007929be209e0cf70b31c7994aeda8daaea0009ac5189ae4c1e6db24fe9cdc0d53a8bf25d77c1a01b2c0240123be5eb0ba86abb9d9aef1
-
SSDEEP
192:raHhJLAEpmd//vba03LDszsQQQQQQQQQQQQQQQ6RCK3T9CCqDE045HQNnhnhnhK:rCvUbLoz3mT6DE045HN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.dbf8c6500ca7fddc66d5e806a5fdd550.exe
Files
-
NEAS.dbf8c6500ca7fddc66d5e806a5fdd550.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ