Static task
static1
Behavioral task
behavioral1
Sample
1be8b2cbfb6d6a008ee1774c88f731f0_NEAS.exe
Resource
win7-20240220-en
General
-
Target
1be8b2cbfb6d6a008ee1774c88f731f0_NEAS
-
Size
200KB
-
MD5
1be8b2cbfb6d6a008ee1774c88f731f0
-
SHA1
ca0678f29a0d0dbc5e5a5137470fc857d99d9dd4
-
SHA256
9767cda2691a15a95109477f3d179b7334425f6a326bc292cf15a5d620086651
-
SHA512
ec63f1a1fddd9206334e837747f911eba93119eb848a04bfb3eb2833df3d6407f84ed11a6651aa93de2af2add44e61d973e0781c3112f0686371961a97ad6f66
-
SSDEEP
3072:gzsh2AAvDWXcUyPcU1Yf20d1SV1hK6EfFxGS1a82oUN0+slcx1n9sKS1c:ge2AcWXTU30d1SnPgxnetS1c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1be8b2cbfb6d6a008ee1774c88f731f0_NEAS
Files
-
1be8b2cbfb6d6a008ee1774c88f731f0_NEAS.exe windows:4 windows x86 arch:x86
942abe0283eea0388ae00a58e1108761
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord517
ord595
ord598
ord520
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord716
ProcCallEngine
ord536
ord645
ord681
ord576
ord100
ord616
ord617
ord619
ord580
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ftmknpg Size: 76KB - Virtual size: 76KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE