Behavioral task
behavioral1
Sample
NEAS.a00386f460a5aaceb4310831abcc8af0.exe
Resource
win7-20231020-en
General
-
Target
NEAS.a00386f460a5aaceb4310831abcc8af0.exe
-
Size
1.6MB
-
MD5
a00386f460a5aaceb4310831abcc8af0
-
SHA1
1f4010021e77866e5e645d7f56ca6ba0534cbcc4
-
SHA256
978974f6715bc964c5acee919077965c8cc98dc8583fc34f544b425c05e196c3
-
SHA512
cdb41669d359d5d235986717bee1850321a44c76fa7fa1ef97ff800d093ed7870770e9cd3ca6fd022d316406760df522615ca30c5efafdf196463bb1e8ff4e98
-
SSDEEP
49152:GezaTF8FcNkNdfE0pZ9oztFwI3I4O/QdGWrtgpViM:GemTLkNdfE0pZaI
Malware Config
Signatures
Files
-
NEAS.a00386f460a5aaceb4310831abcc8af0.exe.exe windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 619KB - Virtual size: 619KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ