Static task
static1
Behavioral task
behavioral1
Sample
NEAS.dcc78f3fa6912c13c8578fa451acd6f0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.dcc78f3fa6912c13c8578fa451acd6f0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.dcc78f3fa6912c13c8578fa451acd6f0.exe
-
Size
411KB
-
MD5
dcc78f3fa6912c13c8578fa451acd6f0
-
SHA1
c42892e4d22d4a348f82dedbfa129181b528f0c7
-
SHA256
33a5ed8218872e4162882606d6d29e73236ba2f1c94f3a663b4b1b06b9add060
-
SHA512
ebb5fbc77c673a72655d94f4737978109c6305b431a76bfab5cb05c7f87b081403f372770b84fa86b55043b96e535c1dd3d246502832bf801d456cbc107763f6
-
SSDEEP
12288:zJMxy+7SM0ZWxevPMeRSau5QKJu9i2zIRDhTF+i9:z2wTMcMn3hJmE9ki9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.dcc78f3fa6912c13c8578fa451acd6f0.exe
Files
-
NEAS.dcc78f3fa6912c13c8578fa451acd6f0.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ