Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d74de051de08a2e72de8e7d917f728c0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.d74de051de08a2e72de8e7d917f728c0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.d74de051de08a2e72de8e7d917f728c0.exe
-
Size
520KB
-
MD5
d74de051de08a2e72de8e7d917f728c0
-
SHA1
909f3cf220877c5a0c62049bdfc0bb2de3f4e7b4
-
SHA256
14d54427f3116c0d2a2cef9c7c4d24d3f8462e22b76c799b6921011744693368
-
SHA512
ddcb4b1b89d4792b2a853bab74e2408e58fc1018769f5e629587ddc7ec00d30da85a90a9f2c10816d222fa78ad26e467994682f73a892be19fb52f35adbac048
-
SSDEEP
12288:QQlc87eqqV5e+wBV6O+SZiH0zHP1wn1iICa3I1ir98hUpm:QQSqqHeVBxWGdw1i2YYeU8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d74de051de08a2e72de8e7d917f728c0.exe
Files
-
NEAS.d74de051de08a2e72de8e7d917f728c0.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 229KB - Virtual size: 229KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l2 Size: 229KB - Virtual size: 229KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ