Static task
static1
Behavioral task
behavioral1
Sample
888998ce3bcbaed93a2e3ad62ca84ad0_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
888998ce3bcbaed93a2e3ad62ca84ad0_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
888998ce3bcbaed93a2e3ad62ca84ad0_NEAS
-
Size
66KB
-
MD5
888998ce3bcbaed93a2e3ad62ca84ad0
-
SHA1
ff8a7590210cb58b4f44993a1f5356817852ba54
-
SHA256
1ba85ad49933c3ee2971e5598b72d9ca174f4701322f4ab810035576486ceb2a
-
SHA512
be0bf5af4a3552a5d29502563d178cbf06081c9ba3d174cda2cd78d918c63568b93b28baa45309c524ff1632fb2b4d2702daa683262206fb24201b73e31e5469
-
SSDEEP
1536:doWbZG4AL4C7WX2kO/+a8a9dL9gm2ItCMqJxxVfBd:doWFAJ7i2kM8a9dxgPuG1fL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 888998ce3bcbaed93a2e3ad62ca84ad0_NEAS
Files
-
888998ce3bcbaed93a2e3ad62ca84ad0_NEAS.exe windows:4 windows x86 arch:x86
76a67a52e69c8f625c75b12adc4d490e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetAppContainerNamedObjectPath
ClosePackageInfo
K32GetPerformanceInfo
CallNamedPipeA
AreFileApisANSI
FindNextVolumeMountPointW
ExpungeConsoleCommandHistoryW
CheckRemoteDebuggerPresent
GetNumaAvailableMemoryNodeEx
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE