Static task
static1
Behavioral task
behavioral1
Sample
64226fe2dde9ad9066f70cee3b52db30_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
64226fe2dde9ad9066f70cee3b52db30_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
64226fe2dde9ad9066f70cee3b52db30_NEAS
-
Size
14KB
-
MD5
64226fe2dde9ad9066f70cee3b52db30
-
SHA1
d9edb2325da24fdb47dbaa78a10e1ec0d7ea6201
-
SHA256
47e137ba6c0759f4a16eadab95dbbd3e8b3ec090024f5a23bc01e1c1b7105a83
-
SHA512
669d95d3a7d940effb593bd9a134c5fdf96960fc8d6ff17f37aac00d668a802982fb20091d72bc0018d6bb4144f5032837f3c3668e32af7a6ff0ad61e7b88dc8
-
SSDEEP
384:xd0vec386S8YTQ49cu7xiU0VdkqTea6ODE045HK:x6vh386mTjyub0VdkQexkA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64226fe2dde9ad9066f70cee3b52db30_NEAS
Files
-
64226fe2dde9ad9066f70cee3b52db30_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ