Static task
static1
Behavioral task
behavioral1
Sample
0817dc0fa23aeeaa0eb9a911f16eab20_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0817dc0fa23aeeaa0eb9a911f16eab20_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
0817dc0fa23aeeaa0eb9a911f16eab20_NEAS
-
Size
14KB
-
MD5
0817dc0fa23aeeaa0eb9a911f16eab20
-
SHA1
918836f954c0d7149cfe81d1ed16efa30ceaef09
-
SHA256
054c87010b0f86034df762546647249d8ae49291e8b71dd525d16f80f2bb0937
-
SHA512
4f20061aef6acca6c550dfdd8d4c6738daa09b67d5f669b8327b7bec2991e80177697d1f56d1439f3be42a78594def03872e745c1a89df904ef65aae4d71c9ab
-
SSDEEP
384:LMIxxydfFD6QL5es+SN8H+9vny0vvT8v8IDE045H:YIxFwwly8H+9vy0RSA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0817dc0fa23aeeaa0eb9a911f16eab20_NEAS
Files
-
0817dc0fa23aeeaa0eb9a911f16eab20_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ