Static task
static1
Behavioral task
behavioral1
Sample
NEAS.6f68df5ef38e7ef5e83d3f24c85a3ca7a1b0689d730d00b823f2d56c759f3917.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.6f68df5ef38e7ef5e83d3f24c85a3ca7a1b0689d730d00b823f2d56c759f3917.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.6f68df5ef38e7ef5e83d3f24c85a3ca7a1b0689d730d00b823f2d56c759f3917.exe
-
Size
724KB
-
MD5
cef8c16746753d8c1c5cbe10e4124032
-
SHA1
80d739a9c76ce48572930abce88f0b2b077510bd
-
SHA256
6f68df5ef38e7ef5e83d3f24c85a3ca7a1b0689d730d00b823f2d56c759f3917
-
SHA512
54af8969dc9e265da3997e014f68d8596ce3af70786cff5d1c57c0dbfaa9e9d7e1d2f60887afa1b81ecc68e70ae5c40ecf5261257aa23e173c46c017766f321b
-
SSDEEP
12288:p8k7eMujbVGf3t5tYZMEO7stJJFyFOAb9a2wXlTmsW3xGniOgHcY29e:ise18/PtYZ9+ej4FOAb9a2w1638iOwcY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.6f68df5ef38e7ef5e83d3f24c85a3ca7a1b0689d730d00b823f2d56c759f3917.exe
Files
-
NEAS.6f68df5ef38e7ef5e83d3f24c85a3ca7a1b0689d730d00b823f2d56c759f3917.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 722KB - Virtual size: 721KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ