e:\Project2\ZJCode\ZJCode\obj\Debug\ZJCode.pdb
Static task
static1
Behavioral task
behavioral1
Sample
00d936ddd4b384e17cbe9d925b606a50_NEAS.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
00d936ddd4b384e17cbe9d925b606a50_NEAS.exe
Resource
win10v2004-20240426-en
General
-
Target
00d936ddd4b384e17cbe9d925b606a50_NEAS
-
Size
144KB
-
MD5
00d936ddd4b384e17cbe9d925b606a50
-
SHA1
79d2cbfd635534dbea6459d4533611bdf3e463c5
-
SHA256
93e072a7c2a858d66c2f45a2514c3bbabe78fe1eeeec20b44fe0090904e2175e
-
SHA512
33baf26baaa1e954fbde547705989bbde6f9eefadee555d911cca8ea1d74ac57ce22d5eee599c42d74a295618a111f9d65c303fc77077c30b41130975b5fa7be
-
SSDEEP
3072:9YJDjvRtcY80G0Kp4DjPgvuJHXWdyi9F7P1diCkqv5trvVzthDHPO2+rxJguwFyw:9EvAY8a7PEdyi37ddPZv5fzjtZ/eh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00d936ddd4b384e17cbe9d925b606a50_NEAS
Files
-
00d936ddd4b384e17cbe9d925b606a50_NEAS.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 142KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ