Static task
static1
Behavioral task
behavioral1
Sample
1d90d4e0287c9dd57924e9911ef8a631_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1d90d4e0287c9dd57924e9911ef8a631_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
1d90d4e0287c9dd57924e9911ef8a631_NEAS.exe
-
Size
549KB
-
MD5
1d90d4e0287c9dd57924e9911ef8a631
-
SHA1
cdafdc7c0f2d2da663e49e649b160189d68297ba
-
SHA256
f4f56f076cb77290a0e49382798eb2e7f5f9b65e22c861740906a627d76d72fe
-
SHA512
0a3831d333d152c65b41e59d8879f5e0a8f9c02e071ae983f093c2e41e101d8bc44be7b0e53d3d035abcb7dc462bf3604fdfb60e65e61f9350c11eb938ed39a6
-
SSDEEP
3072:iCaoAs1k1Pol0xPTM7mBCAdJSSxPUkl3ViFNdAMQTCk/dN92sdNhavtrVdewnAxA:iqDwwl0xPTMiB9JSSxPUKIWdod3XmC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d90d4e0287c9dd57924e9911ef8a631_NEAS.exe
Files
-
1d90d4e0287c9dd57924e9911ef8a631_NEAS.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 513KB - Virtual size: 564KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE