Static task
static1
Behavioral task
behavioral1
Sample
31db1dc2e3b240b816d5d7966836c490_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
31db1dc2e3b240b816d5d7966836c490_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
31db1dc2e3b240b816d5d7966836c490_NEAS
-
Size
14KB
-
MD5
31db1dc2e3b240b816d5d7966836c490
-
SHA1
f45afca6580583e0d4a2d905808d297e96c56a49
-
SHA256
519fb2123a70f8251910f55885ca552a5ed5d69cece2a1934088b58d324f0299
-
SHA512
a0fe380c9b6e35802c2577039f47edda674b7feada464d6338e90a1c53c879cd220db7d6bc0c3eb30fbeb73dd20bb903f329affa34ef79267f1cc3d7255919cb
-
SSDEEP
384:NaxeeFw9idFAAAAAAADMMMMMMMILnQqmhDE045HPbbb:NCZdFAAAAAAADMMMMMMMILfeA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31db1dc2e3b240b816d5d7966836c490_NEAS
Files
-
31db1dc2e3b240b816d5d7966836c490_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ