Static task
static1
Behavioral task
behavioral1
Sample
3f538c74992d87578f4826be48bc7cc0_NEAS.exe
Resource
win7-20231129-en
General
-
Target
3f538c74992d87578f4826be48bc7cc0_NEAS
-
Size
68KB
-
MD5
3f538c74992d87578f4826be48bc7cc0
-
SHA1
e9d5947c60667af64541cbe21a02819e81abc5e1
-
SHA256
0bce5543fe65dee0ecd17a2c082f93c19d4ef3fe31417bafe8d898e0a128a1ee
-
SHA512
347548f86e07665fd3a14cb7196424ac45d53cf4f9654629e9de3e2a4d328d3f64d85743bab434bb86d9b633a65ad05d9bd4c2651f52719e074e6185f39bc3a0
-
SSDEEP
1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb7GTz:ymb3NkkiQ3mdBjFIW3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f538c74992d87578f4826be48bc7cc0_NEAS
Files
-
3f538c74992d87578f4826be48bc7cc0_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 274B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ