Static task
static1
Behavioral task
behavioral1
Sample
5431957771760af2a2516e6f573bb170_NEAS.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
5431957771760af2a2516e6f573bb170_NEAS.exe
Resource
win10v2004-20240426-en
General
-
Target
5431957771760af2a2516e6f573bb170_NEAS
-
Size
66KB
-
MD5
5431957771760af2a2516e6f573bb170
-
SHA1
16ef33baeb3ea762fcb3f7d112ee1f98e7e7d41a
-
SHA256
0a1a0295d2024731d6c238c1f326d999cd38a5a5bf49528c5b8bc5eb63165039
-
SHA512
6388b124286faec7c98179c4e00a3e3d763e89956f6af1a116e4c73516de684179242066de62cf87f1c4d35140157c86b46b49341aa470d72a5e46e050b30b31
-
SSDEEP
768:EOUWtMYkEOW16YRm/CSEAemLTl0eJpigKqk58sCuSfWV/cXMscAybZAhfmNPc:9U9YkETRm/CQTN7igW58kSASMHp7NPc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5431957771760af2a2516e6f573bb170_NEAS
Files
-
5431957771760af2a2516e6f573bb170_NEAS.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ