Static task
static1
Behavioral task
behavioral1
Sample
395ee6a27837d52e111802d1f9bfe860_NEAS.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
395ee6a27837d52e111802d1f9bfe860_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
395ee6a27837d52e111802d1f9bfe860_NEAS
-
Size
564KB
-
MD5
395ee6a27837d52e111802d1f9bfe860
-
SHA1
19fc242ed3557f0e80f6bf57c60d8808219505db
-
SHA256
a690765b4c66769942bff750350f06dcb79059e855d169a01c606c05720b08a4
-
SHA512
911640450c6fd07cab87b51c2c3f6f7b9fe4bca9ea36fc2a5abe20459b52097fa07bccdcdc2f9e9465d43f034b9d3a75e3794a474602345a963c760bebad8dab
-
SSDEEP
3072:nV8RinudiP52xx67lLdjiHDoJFcFmKcUsvKwF6TU2cLexwUJj+2sRO/jjAYJFcFc:nKkgiPA6RtPxUs4KqXvxUs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 395ee6a27837d52e111802d1f9bfe860_NEAS
Files
-
395ee6a27837d52e111802d1f9bfe860_NEAS.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PGllPZFG Size: 4KB - Virtual size: 4KB
etmQYOzq Size: 4KB - Virtual size: 4KB
NkQDFVfl Size: 4KB - Virtual size: 4KB
BzRWgoYq Size: 8KB - Virtual size: 8KB
WZWPbjOL Size: 4KB - Virtual size: 4KB
zheByWMr Size: 4KB - Virtual size: 4KB
DVisYruV Size: 12KB - Virtual size: 12KB
AlHQobmf Size: 4KB - Virtual size: 4KB
jWJDgZrN Size: 8KB - Virtual size: 8KB
ywcYPteW Size: 304KB - Virtual size: 304KB