Static task
static1
Behavioral task
behavioral1
Sample
312480a9900b1359953f2dbd359dbd00_NEAS.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
312480a9900b1359953f2dbd359dbd00_NEAS.exe
Resource
win10v2004-20240426-en
General
-
Target
312480a9900b1359953f2dbd359dbd00_NEAS
-
Size
14KB
-
MD5
312480a9900b1359953f2dbd359dbd00
-
SHA1
e7bf2e653f8c0e825247299a7eabc288cea2fcd4
-
SHA256
2906c020551145434b250c01e5df16847118be29e2c72ebb9fde1115afbe523f
-
SHA512
266a7b8f6f8e35cb26cef262daae65a910d69b8023a8d23fa79a7b8a9059dab66a14a98f44ad24e24b5a57bae0f97f6367013034c953a00c485256b53c62c13a
-
SSDEEP
192:FL5oBTO+dnzs43pZl0kxld09uKW4GcmhxkF5+IjA9t7eHbiDmqDE045HQ:FLOpZ3pImldQFZmb+nGSHO9DE045H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 312480a9900b1359953f2dbd359dbd00_NEAS
Files
-
312480a9900b1359953f2dbd359dbd00_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ