Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d9f8a6e8f15c54129fbae879f1aaf7a0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.d9f8a6e8f15c54129fbae879f1aaf7a0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.d9f8a6e8f15c54129fbae879f1aaf7a0.exe
-
Size
66KB
-
MD5
d9f8a6e8f15c54129fbae879f1aaf7a0
-
SHA1
438cef8c84490cc0e98a384f73da3ce4037b431e
-
SHA256
5d76cc35501f9b6d811ee5948fd907338b5f2ac591ae4a7bdcb15d588e079889
-
SHA512
90df260eb9f5a0d484bc48e47c95f370030bef5bc41b98ad455779596c70eef6bffedf33a1941f0263e11b7bd1db8a2b3b3f091caf789b92a85c9e023ca460ec
-
SSDEEP
1536:6QudMOzwbb2Gu120v3O4L4ewLc6MbqEbiVRdCK8waL8kogh:8dMgwcALe1JWEbiVRdCLwk8ko4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d9f8a6e8f15c54129fbae879f1aaf7a0.exe
Files
-
NEAS.d9f8a6e8f15c54129fbae879f1aaf7a0.exe.exe windows:4 windows x86
4ea8a009b30e079c43346f96882cbe99
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteSynchronizationBarrier
SetThreadPreferredUILanguages
ApplicationRecoveryInProgress
GlobalFlags
IsCalendarLeapDay
SetCurrentDirectoryW
PrivMoveFileIdentityW
SetMessageWaitingIndicator
GetCurrentConsoleFontEx
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 51KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE