Static task
static1
Behavioral task
behavioral1
Sample
50897908667c8578153387a7b380fdb0_NEAS.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
50897908667c8578153387a7b380fdb0_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
50897908667c8578153387a7b380fdb0_NEAS
-
Size
19KB
-
MD5
50897908667c8578153387a7b380fdb0
-
SHA1
5fffd456f04973d1a8f7b67a12c778286e680630
-
SHA256
8d7f34e31a7a1b0cb3e5bac00793e6f114f4189c91c1dd4713b3b1ef204ceb6a
-
SHA512
3cbcc9f0db0316d5de56dcc0e3f13c5a2fbbe31b13002d7ab9dca6e6638e16d001c5d9ba31bc451ecb3e889e82f71e47d2b41752e20483bd1f134e8d4defa4ef
-
SSDEEP
384:1FCSNXZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9PffPz:jjQGPL4vzZq2o9W7GsxBbPr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50897908667c8578153387a7b380fdb0_NEAS
Files
-
50897908667c8578153387a7b380fdb0_NEAS.exe windows:0 windows x86 arch:x86
a96d166ab17e011e8049d87211158ae5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
Sections
PELIB Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�Y|�uR Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE