Static task
static1
Behavioral task
behavioral1
Sample
dbcc8dccf380b77177d50e16a5326980_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dbcc8dccf380b77177d50e16a5326980_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
dbcc8dccf380b77177d50e16a5326980_NEAS
-
Size
57KB
-
MD5
dbcc8dccf380b77177d50e16a5326980
-
SHA1
3548e6ba83be62824f16b88ddbb005dc235e3cd9
-
SHA256
ac6ffb80027ccca4a4e56293e0f5f67bb47a74c6e65a5977e416486ef99c9630
-
SHA512
88dab954a5dcd6f3879a9f09696843ced3dec092520889c47ee0d3427b4ab92285942d777a194084ecf25bae180b6d8fe5d43e23dd8e371ae76844d5469c1428
-
SSDEEP
768:e6jH60ceKOWIOSVU0FnUFUd1VW0ekjM0dUum4tkYAUX/hk5s8uI9iBP+/1H5WHb:e0eIjVzuYCisumEAUX/i5r9YPUu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbcc8dccf380b77177d50e16a5326980_NEAS
Files
-
dbcc8dccf380b77177d50e16a5326980_NEAS.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fldo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ