Static task
static1
Behavioral task
behavioral1
Sample
NEAS.db82f17d518de2955604e6dfdda7e540.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.db82f17d518de2955604e6dfdda7e540.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.db82f17d518de2955604e6dfdda7e540.exe
-
Size
77KB
-
MD5
db82f17d518de2955604e6dfdda7e540
-
SHA1
649a0a44611eaea4c823b830d4a8cf73b3eec24e
-
SHA256
73eaaa6659805b3e47b62c156ccf664112bc6fdd2ef58b337f139449f9caf0d7
-
SHA512
6c58c599f3b4fc6142a9a7ee28fd77129b88d49a4dc777e7712ac0eaef91f8d81b56f8791b07f3981216abd7b46f0532797c3b26cd76f4c5b4781d7f1febe78e
-
SSDEEP
768:c27SKNx27SKNtzAYCpOXW+GmXMUxx2dsreFNe+uhJwGLztZOzdWR0JxvEa7ARysr:MzAYJkUxtSFN+wGLztoFTcjzRZ9yUym
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.db82f17d518de2955604e6dfdda7e540.exe
Files
-
NEAS.db82f17d518de2955604e6dfdda7e540.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ