Static task
static1
Behavioral task
behavioral1
Sample
4da7824f9dc1808bf8e9f021e4902ca0_NEAS.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
4da7824f9dc1808bf8e9f021e4902ca0_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
4da7824f9dc1808bf8e9f021e4902ca0_NEAS
-
Size
18KB
-
MD5
4da7824f9dc1808bf8e9f021e4902ca0
-
SHA1
8c80592bc0f18487ba6770916bd89d5f1ec59753
-
SHA256
11271fa2fa620391d5916e2dc85705e421d8c75b668bd59c309f1391278f3479
-
SHA512
16949c2c8b80934c5b4749b55c376cbf8864b9e7f03a1e1e7425dfb402ddc70404961727993f5f7270dd7357ddf95fe2e12f6b44d30faf05ee494f7d907cdbfb
-
SSDEEP
384:w4zi/LhwNI4U6gbMs8pGe0/yyP5QUxl+AU1lEaHLBtAD65:XzMLm26gbMs8pv0685Bz6vjLBtAD6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4da7824f9dc1808bf8e9f021e4902ca0_NEAS
Files
-
4da7824f9dc1808bf8e9f021e4902ca0_NEAS.exe windows:4 windows x86 arch:x86
411c26819234a12cc52aaaf849f1d844
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
VirtualAlloc
CloseHandle
CreateFileW
DeleteFileW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetCurrentDirectoryW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
wininet
InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
InternetCloseHandle
InternetReadFile
shell32
ShellExecuteW
ntdll
RtlDecompressBuffer
swprintf
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 916B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ