Static task
static1
Behavioral task
behavioral1
Sample
7535c8a23e47fdf33a600b72f0289570_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7535c8a23e47fdf33a600b72f0289570_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
7535c8a23e47fdf33a600b72f0289570_NEAS
-
Size
69KB
-
MD5
7535c8a23e47fdf33a600b72f0289570
-
SHA1
e9682fa0e9f8a1bbb7029c9265939d782441b61d
-
SHA256
1c02ab93f8c2e9bbabde113cb98d429d65e002c9efe61b3b763536a04f3a232f
-
SHA512
dd749e8266bc03e18b60d9ef7ba6a02adbb9944611e4d0eeadf80a6009734dc72651a5a01d8056c24b7bfdf43039e31904cb5e641211af5f91bfb65e6ff6b5d6
-
SSDEEP
1536:NB+FC9RntfWeoGiPyCHjKDjfQQQtUe3ZX:NB+F8tfPN4yCDKDjfQQQtd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7535c8a23e47fdf33a600b72f0289570_NEAS
Files
-
7535c8a23e47fdf33a600b72f0289570_NEAS.exe windows:1 windows x86 arch:x86
17a4bd9c95f2898add97f309fc6f9bcd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcAddress
LoadLibraryA
ExitProcess
Sections
.bss Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NewSec Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE