Static task
static1
Behavioral task
behavioral1
Sample
NEAS.ddd98139efecb9ae2887afbd961cc5d0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.ddd98139efecb9ae2887afbd961cc5d0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.ddd98139efecb9ae2887afbd961cc5d0.exe
-
Size
1.5MB
-
MD5
ddd98139efecb9ae2887afbd961cc5d0
-
SHA1
6ff2b11a7c54fba303e5c8e49743b51e3626bd37
-
SHA256
5c19d18d31bb3931e4295947191164effb2db0942058d6546108a8decb073309
-
SHA512
27b03f23f9c08258fe731c60f654c923570755e01f63125fcf9ea6e2bf6f9990de88bb941348246367f24d9dbff95f532a70ddc9a6365395d07a8eaa49a0b8a1
-
SSDEEP
24576:zzqxG2Z9mIhQvq8wd7D7Mp0b5jQanOKtvbL23BmTpc5QORA1WZOGeL:XMmSdzGBm1wA0O/L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.ddd98139efecb9ae2887afbd961cc5d0.exe
Files
-
NEAS.ddd98139efecb9ae2887afbd961cc5d0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ