d:\_Bld\10657\7994\Sources\obj\Win32\Release\EvaluationContainer.NetFX40.csproj\Microsoft.Mashup.Container.NetFX40.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4adf1692135e47f3bcd43acc46bb98f0_NEAS.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
4adf1692135e47f3bcd43acc46bb98f0_NEAS.exe
Resource
win10v2004-20240426-en
General
-
Target
4adf1692135e47f3bcd43acc46bb98f0_NEAS
-
Size
2.2MB
-
MD5
4adf1692135e47f3bcd43acc46bb98f0
-
SHA1
344aeb6973250ad7f260c69018a91f2ef846fff9
-
SHA256
bd9f5a8dc474a1285d4c7ce49de46a3bbbaa356fe5ee9623f751a4354ca66993
-
SHA512
917d5f1b9c2111d496c5a6897c6d078bebc2e74539e09923d7fa649d6a3ee1646350fd2a24003b04dd60a4633760463b61a413c7d9fc005fd94918967ec0d89c
-
SSDEEP
24576:K+SBC262ROf1IegqutJQ5FeQzcuC4r6HQ+H35DMw2n/qIjtAT3GCaewsAjbw/rBw:/S962RAR5FeA6wm35DMnCIjtAylljsi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4adf1692135e47f3bcd43acc46bb98f0_NEAS
Files
-
4adf1692135e47f3bcd43acc46bb98f0_NEAS.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ