Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d2b87c9f254edf36016ff6b89a763620.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.d2b87c9f254edf36016ff6b89a763620.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.d2b87c9f254edf36016ff6b89a763620.exe
-
Size
551KB
-
MD5
d2b87c9f254edf36016ff6b89a763620
-
SHA1
9afdbc7639f5e916878c6e1073d00bc0c5ae8215
-
SHA256
d87a7dab5db13edf42f55181520b2b4137bd5b45b471562eda0c55786ed83b68
-
SHA512
461a7d558389f5d4ddca5c7c16a4c6e7bc5d1508e3281a714ab66aedb2ec0ca0ea0cf84900ecc648923d51a2740ade528521b68031bced0e2e3f614adff04443
-
SSDEEP
12288:zJMxy+7S7p8PVYX1chSciGbnkmcxCne3xHW37VIwlkCjd+k46k:z2wTMuX1ftxCCHW37VIwFDk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d2b87c9f254edf36016ff6b89a763620.exe
Files
-
NEAS.d2b87c9f254edf36016ff6b89a763620.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ