Static task
static1
Behavioral task
behavioral1
Sample
NEAS.dc60d2664af0f3881cc494e9295e0534293254f1023c22aed8159c3f85f08a4e.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.dc60d2664af0f3881cc494e9295e0534293254f1023c22aed8159c3f85f08a4e.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.dc60d2664af0f3881cc494e9295e0534293254f1023c22aed8159c3f85f08a4e.exe
-
Size
712KB
-
MD5
60ca8b22a840ae06115e64de3d8c296e
-
SHA1
111232ebab2215f15a97a9148be241f8d5456879
-
SHA256
dc60d2664af0f3881cc494e9295e0534293254f1023c22aed8159c3f85f08a4e
-
SHA512
8bae355b3752d677acb403e907fe27f9c2575881018c1a5170e18d7b389a6afb50271a58500205bf9326fc1387129bc0dea49fc0f390b5e7564cb86304e2516f
-
SSDEEP
12288:OR8Ydmk3rq9rAa8vDFuvwo2B/njjfivpegqrrBWGhGVn6sQ1cbU:OWYgYgj8A4hB/n/fiELrBpin3Qeo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.dc60d2664af0f3881cc494e9295e0534293254f1023c22aed8159c3f85f08a4e.exe
Files
-
NEAS.dc60d2664af0f3881cc494e9295e0534293254f1023c22aed8159c3f85f08a4e.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 710KB - Virtual size: 709KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ