Static task
static1
Behavioral task
behavioral1
Sample
349c467d60eb8f88c531042ecfa749c0_NEAS.exe
Resource
win7-20240221-en
General
-
Target
349c467d60eb8f88c531042ecfa749c0_NEAS
-
Size
387KB
-
MD5
349c467d60eb8f88c531042ecfa749c0
-
SHA1
ea35852418845af3e762d79a8507d6f3be234fb6
-
SHA256
f23b162111410e0a279735a0603fbcc567042ed51bd54a5787d6fcdec2c80332
-
SHA512
dd6724399c6348362553b91e6f8f9efc3cde3d8b3a2d9d38d535606bdf53380bc7859e9e9775f4752fc2c249e06c097f2530abf986dbee1e6076b02601794d21
-
SSDEEP
6144:n3C9BRo7tvnJ9oH0IRgZvjkKoA+0oD/BBT7bG:n3C9ytvngQjA/fT7bG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 349c467d60eb8f88c531042ecfa749c0_NEAS
Files
-
349c467d60eb8f88c531042ecfa749c0_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 274B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ