Static task
static1
Behavioral task
behavioral1
Sample
65a3a18d69df45b985290878ed9cf4b0_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
65a3a18d69df45b985290878ed9cf4b0_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
65a3a18d69df45b985290878ed9cf4b0_NEAS
-
Size
4.7MB
-
MD5
65a3a18d69df45b985290878ed9cf4b0
-
SHA1
331033d2f74309cefaf7a5a1d79a7f178d9f8ddc
-
SHA256
702818a3248b6adb3ae5bd77dd2a69b8668a5c01d0834546409ed343d1d33af2
-
SHA512
3a9e0779031b527363a582b83ebfe8eb9a5cf5a5fcdf1ebefe680ecf3b22a9e60db55d3714ecb315969b26e829ded1bda3c073d5ff5a5cd03bbd6393c8b2cc58
-
SSDEEP
49152:58LUvxwKVVs/LoKCEp64ljalYvoGxUSJpXDljOljqcY/K2RAR5FeA6w:AyhVVs/LompGsRXAz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65a3a18d69df45b985290878ed9cf4b0_NEAS
Files
-
65a3a18d69df45b985290878ed9cf4b0_NEAS.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ