Static task
static1
Behavioral task
behavioral1
Sample
NEAS.aafdc3ff9898de64c2bd829bd9db3265a52dc9744736b0387ce75ec1d0e61247.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.aafdc3ff9898de64c2bd829bd9db3265a52dc9744736b0387ce75ec1d0e61247.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.aafdc3ff9898de64c2bd829bd9db3265a52dc9744736b0387ce75ec1d0e61247.exe
-
Size
192KB
-
MD5
c83f04ec48bf03b7e2c2bb3c17b67ef2
-
SHA1
725944f6228a42f0f7ada945162b9db16d7c7807
-
SHA256
aafdc3ff9898de64c2bd829bd9db3265a52dc9744736b0387ce75ec1d0e61247
-
SHA512
baa1e2e447df1a4dd3b873c7fddee8d792ba44512f866ffbd5be9ba9ee96d9dcae365cd96de2caaef9ebb2bccaea3d6987e1ba244726f4a265949a59d0724b52
-
SSDEEP
6144:2B8cpwUSK2D54fcNRS5GqZ+WutMIWWVXCz:2OcpdSYkNRS5GqZ+WutMWVy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.aafdc3ff9898de64c2bd829bd9db3265a52dc9744736b0387ce75ec1d0e61247.exe
Files
-
NEAS.aafdc3ff9898de64c2bd829bd9db3265a52dc9744736b0387ce75ec1d0e61247.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 1KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE