Static task
static1
Behavioral task
behavioral1
Sample
120e534228e1b5ae917dc7c3d2531520_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
120e534228e1b5ae917dc7c3d2531520_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
120e534228e1b5ae917dc7c3d2531520_NEAS
-
Size
14KB
-
MD5
120e534228e1b5ae917dc7c3d2531520
-
SHA1
3b5637e7a123367ebe48f7ffaf89bc5c659f1f0c
-
SHA256
306289089817e7617a51279793bfc1ad81308f8ef4cdeaa3aedb6e2b75700914
-
SHA512
898db5b964a6d1bc946bfb39b2f61d579885d6e868753a86952551ecf4b323a5ab0864a3955c70add0c44ff65a8953709126644cd5a52b896c790a3faf2b3cc0
-
SSDEEP
384:AHpqbOrHlMXodHJ1OGONU2DE045HLc2c2c2c2:BbO7l+2p4GOKcA5c2c2c2c2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 120e534228e1b5ae917dc7c3d2531520_NEAS
Files
-
120e534228e1b5ae917dc7c3d2531520_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ