C:\Users\Rianvy\Desktop\SCR - MoMzGames\pbserver_game\obj\Release\pbserver_game.pdb
Static task
static1
Behavioral task
behavioral1
Sample
dc4ca9a9d32401568e6b47d154aa74c0_NEAS.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
dc4ca9a9d32401568e6b47d154aa74c0_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
dc4ca9a9d32401568e6b47d154aa74c0_NEAS
-
Size
377KB
-
MD5
dc4ca9a9d32401568e6b47d154aa74c0
-
SHA1
c504edd2bcb7bb38d1f89ff70213f105164bc523
-
SHA256
634b349285f421345017765d83cf472d3d56d3bbfbe19b6c6813cff74e5c97b3
-
SHA512
957f81c68778821ff2f4ddcfcf5963fd0b854360fe4d18b4418966a7aabbdc888fc540dd0c7b8ef9de4e7a443b47a5c36f3d2568e6752e5507e83d495668feeb
-
SSDEEP
3072:aS96eV89y3vuVqb8giR/42WaNg7i+ONYNwGo70JSgg9Z1m/+tRSp2+k6Lh:aK6yEeiiRawi+OaNwGPJSh9xtRiL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc4ca9a9d32401568e6b47d154aa74c0_NEAS
Files
-
dc4ca9a9d32401568e6b47d154aa74c0_NEAS.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 291KB - Virtual size: 291KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ