Static task
static1
Behavioral task
behavioral1
Sample
355c3bf64e0b8fa87875d0dcc148cfb0_NEAS.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
355c3bf64e0b8fa87875d0dcc148cfb0_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
355c3bf64e0b8fa87875d0dcc148cfb0_NEAS
-
Size
14KB
-
MD5
355c3bf64e0b8fa87875d0dcc148cfb0
-
SHA1
9f60939f3534340efafbed379761a883c178267e
-
SHA256
4aeefbaecab541306194de68204759f41d5572219718e575ef6365a8b5caf5cb
-
SHA512
da388da13618eea748af8eae86848d8dde24ac4ab1a30fd5702ca90238d615c6ba0ad266137e388ee88368938137b457c5bd4e98f2627f6ada141b88c4eb184b
-
SSDEEP
384:dapbFEY9vRRRRRRFDWYV6DE045HwDDDD:o9pDWCAAqDDDD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 355c3bf64e0b8fa87875d0dcc148cfb0_NEAS
Files
-
355c3bf64e0b8fa87875d0dcc148cfb0_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ