Static task
static1
Behavioral task
behavioral1
Sample
4427edbae874510fc989d8d1362b44f0_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4427edbae874510fc989d8d1362b44f0_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
4427edbae874510fc989d8d1362b44f0_NEAS
-
Size
810KB
-
MD5
4427edbae874510fc989d8d1362b44f0
-
SHA1
8647e84b922f2bdd72a53bb9759a66437fb15bfe
-
SHA256
743c5b883ea05d6a816d3813b777215cb6abc4aa0f4222b4f704744593b472a0
-
SHA512
b7ed7abbcbc325604cbb31df50b6fc50222bd1ef3d4be657896cefc42ad3aeffa0986cc6691e29d9fec212cfe59a225675fbfcccc6a13a50b41f5bc3b97672f2
-
SSDEEP
12288:sSnXzgJTALfvpAJm8QzLcnatUzrCjED0+hkgI6lTEd4bkcTslrndF5As8N:xjgVASA8YMa2zujEDegIWgGQrdXbK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4427edbae874510fc989d8d1362b44f0_NEAS
Files
-
4427edbae874510fc989d8d1362b44f0_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ