Static task
static1
Behavioral task
behavioral1
Sample
3dc927d5083bd83e1c0da698dd197220_NEAS.exe
Resource
win7-20240419-en
General
-
Target
3dc927d5083bd83e1c0da698dd197220_NEAS
-
Size
134KB
-
MD5
3dc927d5083bd83e1c0da698dd197220
-
SHA1
b3b27dc2075c20dacc8b30bdacb5fdd8db5773a0
-
SHA256
026b4a774610f9a4b4913bd8e71e4829734476b8dd014947042a82856045fdfd
-
SHA512
e4deb2d053fd6b881284b2abd62a98ab7f032c8ff69c9f16bb0e40a45f80d743cab00db32d5a702138712bf2c1587b414b83cb4da4b07b0c99770e237915a193
-
SSDEEP
1536:bDfDbhERTatPLTH0iqNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabadwCia:XiRTeH0iqAW6J6f1tqF6dngNmaZCia
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3dc927d5083bd83e1c0da698dd197220_NEAS
Files
-
3dc927d5083bd83e1c0da698dd197220_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 126KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE