Static task
static1
Behavioral task
behavioral1
Sample
330e81ecbfa0c883b0c2b72f08256f00_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
330e81ecbfa0c883b0c2b72f08256f00_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
330e81ecbfa0c883b0c2b72f08256f00_NEAS
-
Size
538KB
-
MD5
330e81ecbfa0c883b0c2b72f08256f00
-
SHA1
f9416c7b6601b74213454834a44865748e8f247c
-
SHA256
82693ed87343e2060b8c3b6acabf4c25b6ac1a7ee01c250bdd318c2f2404138e
-
SHA512
e52ad28ae0297ddc5d2c9c3c0d569f43c655aec9074c2a000ad8b819638289e15c7a4d98728d3a8d648172abf9bdbdcdacf10b28d32d2d4eed1af72253cbb26c
-
SSDEEP
12288:wlb++h1gL5pRTcAkS/3hzN8qE43fm78VC:Wb++w5jcAkSYqyEC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 330e81ecbfa0c883b0c2b72f08256f00_NEAS
Files
-
330e81ecbfa0c883b0c2b72f08256f00_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
VHqxTUpa Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IaDsgWGk Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE