Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d84f99332ca536628954bea840bb4530.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.d84f99332ca536628954bea840bb4530.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.d84f99332ca536628954bea840bb4530.exe
-
Size
64KB
-
MD5
d84f99332ca536628954bea840bb4530
-
SHA1
df1502102a3f90098333d81ceb17324c48d32e2a
-
SHA256
0b68bdcac1183bb219a4c6b08fdfe8535b055a140fd2a4efcc7bc4ad07bb6473
-
SHA512
c1560c80512a14927ccec8605cc5fba18636d524f16c32c162bca100b6bb841d70f2e7a0868a7a4a972f69f70c05828f2b08a1f21e3a275af90ec07b92da2e90
-
SSDEEP
1536:tDSpeA3YSlWhIX+Jewani/Sx7AWkXV1iL+iALMH6:tGrrhwJ/ckXV1iL+9Ma
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d84f99332ca536628954bea840bb4530.exe
Files
-
NEAS.d84f99332ca536628954bea840bb4530.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fldo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ