Static task
static1
Behavioral task
behavioral1
Sample
838af9e3580dcb836c5375a46cf138a0_NEAS.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
838af9e3580dcb836c5375a46cf138a0_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
838af9e3580dcb836c5375a46cf138a0_NEAS
-
Size
74KB
-
MD5
838af9e3580dcb836c5375a46cf138a0
-
SHA1
6871d782f2e101f2f5c7b2ade7843f9e3dc5318b
-
SHA256
cd92f81bbc6b888d457884ce7c4b820d637d9449d7f7b903a9444d64f88ba103
-
SHA512
2e6f363b438aeb125e0d2c8993a7ccd04f5e5cbc72a9d958513aabdaef2bcdc4e36fbbfa8277802568d2ff464747666a077d052780ba3ab34d5b54b8ab65354b
-
SSDEEP
1536:Nx1Qja7luy6y0s4sqfkbnAKBOKofHfHTXQLzgvnzHPowYbvrjD/L7QPbg/Dr0T3s:nOjWuyt0ZsqsXOKofHfHTXQLzgvnzHPE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 838af9e3580dcb836c5375a46cf138a0_NEAS
Files
-
838af9e3580dcb836c5375a46cf138a0_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
4377ekfq Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
44e4jhtz Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
46c9wzyd Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE