Static task
static1
Behavioral task
behavioral1
Sample
2cebc29eff3770151ac207427bef5940_NEAS.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2cebc29eff3770151ac207427bef5940_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
2cebc29eff3770151ac207427bef5940_NEAS
-
Size
32KB
-
MD5
2cebc29eff3770151ac207427bef5940
-
SHA1
7982c827c90dbfe09d9209c98f140e33c223fa06
-
SHA256
f0d1a47483d0c0b4b326822a02aef97179231003ee548d3db2d506452434bd0b
-
SHA512
1f23c3d3e08e3a75e59d3ef0f35dae760dbcbf21cf5b63f09de85f54242f4de430715fc5cd47a9b0eecb4da36ed1d1d43e3b41ef2121b1e695e0ed7e8903f9b1
-
SSDEEP
768:W67xaGjAer7gy4QMcZJpeBHgf8nR5qN66Vecz:Mer8yj3WHJniN66x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cebc29eff3770151ac207427bef5940_NEAS
Files
-
2cebc29eff3770151ac207427bef5940_NEAS.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE