Static task
static1
Behavioral task
behavioral1
Sample
177e36ce4238fa134d54a90624434b50_NEAS.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
177e36ce4238fa134d54a90624434b50_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
177e36ce4238fa134d54a90624434b50_NEAS
-
Size
76KB
-
MD5
177e36ce4238fa134d54a90624434b50
-
SHA1
34ae10ac3835ac03f992e92d77e59ae5abe12210
-
SHA256
8eeff4ae6703351b386c69c36dae92a6c9cbb05a2e1d86e735a0fd297edc3af5
-
SHA512
10ecdbf78e7bd7a36079dd4b064dea102d863c5091256d3c05faa1ce8dec400bb38befb403641ec9e62653e94e7b10dd3cd14a28e4f8b3d76f3142bb4b68a94f
-
SSDEEP
1536:ZyOWZ3jLCeip0uJOHdrVRKPNB9tLa2Jer9s6pjVrs2ryrd1vUQuq6:ZIZ3du8H5CPMs6Hs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 177e36ce4238fa134d54a90624434b50_NEAS
Files
-
177e36ce4238fa134d54a90624434b50_NEAS.exe windows:4 windows x86 arch:x86
d72e5b76b3950142b8f94e49253c8530
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseConsoleHandle
SetHandleCount
GetConsoleAliasExesA
GetCommTimeouts
ResetWriteWatch
GetStartupInfoW
LeaveCriticalSection
SetCommTimeouts
GetPrivateProfileStructW
GetPriorityClass
SetThreadPriorityBoost
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE