C:\Users\Rincol\source\repos\OneKey-PSGO\OneKey-PSGO\obj\Debug\OneKey-PSGO.pdb
Static task
static1
Behavioral task
behavioral1
Sample
84228fd7fe987fe8f4af23b6a2239f40_NEAS.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
84228fd7fe987fe8f4af23b6a2239f40_NEAS.exe
Resource
win10v2004-20240426-en
General
-
Target
84228fd7fe987fe8f4af23b6a2239f40_NEAS
-
Size
92KB
-
MD5
84228fd7fe987fe8f4af23b6a2239f40
-
SHA1
f10b571639f261236c49c7859e3fcaaea3ed6fd3
-
SHA256
f72a5dca52cd489c1a2813eed016a9c4ec58db5112d9ced8fb27dc72b3ceca32
-
SHA512
c754decf1b8f97b5f0f720ffb6eb91032bee5b6f92a9eaeb9ae99641fca952870895d8ae8e1038b03b195a2f7211dddaecd37c6473674585482cab58934c1e9e
-
SSDEEP
1536:NAmg6bE5cR7mkjA6h4BSCVanzZTN/ZxVWEFbuL8yVEqR4wvvmgl:Nj28XAJanzT/ZxUEMoEEjwvP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84228fd7fe987fe8f4af23b6a2239f40_NEAS
Files
-
84228fd7fe987fe8f4af23b6a2239f40_NEAS.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ