Static task
static1
Behavioral task
behavioral1
Sample
917c6a2fdddbac59a313f37aef6a6b40_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
917c6a2fdddbac59a313f37aef6a6b40_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
917c6a2fdddbac59a313f37aef6a6b40_NEAS
-
Size
129KB
-
MD5
917c6a2fdddbac59a313f37aef6a6b40
-
SHA1
b1f5e1d562f312ca2a912aa4f7597f9ac89c5d6d
-
SHA256
838cc888a49ad1af12bce8bb257616071d13d4046f8aca4c03123a55be2fe936
-
SHA512
1c2160144b68fde2897814f18363446571cf1eb7a5d6ee44c956739f377964fa1bc0d170cecb25b12e3056c6ca26113453fee82cc69722e82f4479fd2ace4266
-
SSDEEP
3072:j1i/NU8bOMYcYYcmy51VRgiFCpCIXUWOLTsEsigcL3P6xxc17s5YmMOMYcYY51i/:xi/NjO5xbg/CSUFLTwMjs6l3Oai/NDt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 917c6a2fdddbac59a313f37aef6a6b40_NEAS
Files
-
917c6a2fdddbac59a313f37aef6a6b40_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 88KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ