Static task
static1
Behavioral task
behavioral1
Sample
NEAS.c142e19039ebe3a00ba792fb0875eb50.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.c142e19039ebe3a00ba792fb0875eb50.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.c142e19039ebe3a00ba792fb0875eb50.exe
-
Size
9KB
-
MD5
c142e19039ebe3a00ba792fb0875eb50
-
SHA1
67ee7e895b29b9077a7b4dfa7c30664ab5adbeaa
-
SHA256
7f14c0eb9e90b3c7bded26be972e13bb00406770d7430b05e4bbcb00890a48bc
-
SHA512
3297d6d76822431af750e2dda86224f58d2e8da53e19acaf9301e0b1958996d056cc82eea5ae6bc1adfdb609ffdb5c596a6342f4c8e13c381cb435a22e2c282d
-
SSDEEP
192:+C29NtXlYMeYWAErach/Imh7+s/1LkveffwP83mJ:SZlYMefraa/dh7+2Zkve3wc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c142e19039ebe3a00ba792fb0875eb50.exe
Files
-
NEAS.c142e19039ebe3a00ba792fb0875eb50.exe.exe windows:4 windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 5KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE