Static task
static1
Behavioral task
behavioral1
Sample
1d75d707c3a3b6784d5d4f499cd1a6c0_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1d75d707c3a3b6784d5d4f499cd1a6c0_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
1d75d707c3a3b6784d5d4f499cd1a6c0_NEAS
-
Size
14KB
-
MD5
1d75d707c3a3b6784d5d4f499cd1a6c0
-
SHA1
90f56e014eb1c030fa5e1a75ae358e2c4d223597
-
SHA256
7d2603efac79722939eecdf47a4b0035848070a051082c31bfa3c080028abfc0
-
SHA512
91b4c31d9ce5a96127523c390daeca9d4914fa4a11c7ede7cf58d40fe0f577cb24971b23ecda8f9c62fe0754e9f8497addf7d85c35ea1d9ff0026be0bb87c225
-
SSDEEP
384:sJMbW7UEeou7QYAjw////IHHHHHHHHHf3VvcDE045H:sloRoukQ////kFvGA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d75d707c3a3b6784d5d4f499cd1a6c0_NEAS
Files
-
1d75d707c3a3b6784d5d4f499cd1a6c0_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ