Static task
static1
Behavioral task
behavioral1
Sample
3c6804e13a1e3a78f1a5fff373b26de0_NEAS.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3c6804e13a1e3a78f1a5fff373b26de0_NEAS.exe
Resource
win10v2004-20240426-en
General
-
Target
3c6804e13a1e3a78f1a5fff373b26de0_NEAS
-
Size
354KB
-
MD5
3c6804e13a1e3a78f1a5fff373b26de0
-
SHA1
03af9d5f54b5502429946488591f098fd26baedd
-
SHA256
a2115cfc8b0c0b4331605fed0606cdae125e82c561852f7f98fb6c38f3f26b86
-
SHA512
1a44a163cd0ce967de8330ef257a8f236f6ff50400e8ef1f958b2fc4ce581b3690ac029899d8218b8b2083b32bb9f46fac8138aebad962f52f33cf62add34fbb
-
SSDEEP
6144:zJFzjKA8e+XRU0bPJq8ne1nBHkDU2tcLnsegpfL+woHN:zJFK3RPTJrne1nBHkDU2UsJfVot
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c6804e13a1e3a78f1a5fff373b26de0_NEAS
Files
-
3c6804e13a1e3a78f1a5fff373b26de0_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ