Static task
static1
Behavioral task
behavioral1
Sample
NEAS.b607d204b9850b18b8174c1124fa960a5d204572b6a78e9558589189eb71dd32.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.b607d204b9850b18b8174c1124fa960a5d204572b6a78e9558589189eb71dd32.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.b607d204b9850b18b8174c1124fa960a5d204572b6a78e9558589189eb71dd32.exe
-
Size
677KB
-
MD5
33e32535892e927ef60aac04bee483e6
-
SHA1
ab70f171b3b3bb605dff398e2f9ccae513a9a5e5
-
SHA256
b607d204b9850b18b8174c1124fa960a5d204572b6a78e9558589189eb71dd32
-
SHA512
669d7ff5611e8a99e1a2727beddb2a264551db08d5fddce98214853d3a8cd56d30fddf60e007eda3aed370cf56522d9d66da5fb55a43b018b00f581062195e3b
-
SSDEEP
12288:9WukVc1EjOyWWDxhuoNBZ2UBA7Wzie5lYYj7BK1VGPl8:8uk+KOyJiABEAA7WzT/d7B8Q+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b607d204b9850b18b8174c1124fa960a5d204572b6a78e9558589189eb71dd32.exe
Files
-
NEAS.b607d204b9850b18b8174c1124fa960a5d204572b6a78e9558589189eb71dd32.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 671KB - Virtual size: 670KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ