Static task
static1
Behavioral task
behavioral1
Sample
96f38b0dc7aea4327e528414ba69ac90_NEAS.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
96f38b0dc7aea4327e528414ba69ac90_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
96f38b0dc7aea4327e528414ba69ac90_NEAS
-
Size
14KB
-
MD5
96f38b0dc7aea4327e528414ba69ac90
-
SHA1
aa06bec6a10ffc6a3829945a861813b0b1a888c4
-
SHA256
bdec8382310c5f366a000d83b5977ccb88c040f51c0ee345670c8d19412dd9b5
-
SHA512
03b108fb398402a146b9646bf87af6a9c10ab892d57db702d0ee4fd67d6df3e1482196f6b613ef8f0717aebc7d734675862969d3cc30337bc96a59e42761f2a8
-
SSDEEP
192:8Vx71vrZiniX1dL/hkBQAoL3e8QpIcAZm5DE5+JmSqDE045HQF4/4/4/:6N0n8TOBQAoqps6EAAlDE045HOaaa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96f38b0dc7aea4327e528414ba69ac90_NEAS
Files
-
96f38b0dc7aea4327e528414ba69ac90_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ