Static task
static1
Behavioral task
behavioral1
Sample
23aa4e6717c787d9b7644b97825d0390_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
23aa4e6717c787d9b7644b97825d0390_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
23aa4e6717c787d9b7644b97825d0390_NEAS
-
Size
14KB
-
MD5
23aa4e6717c787d9b7644b97825d0390
-
SHA1
6e85daf0c2bad8fd08517ccc21d3789982bd8c26
-
SHA256
bdf6b970c329624675325a12c7404f7a09f6e019563107e2f6d319bfd5173f40
-
SHA512
c26168f1fedf46672617994ecb6ac7616c116281b0d8be6af71152a3475a9d9da5494e53ef25dbc57a332d60bcd6c2d2093b833af3c1b0445cd9686456f78c16
-
SSDEEP
192:zF7ZqRyPoXmmgtAIRTQgfYKX5cvlxm+qqscKW0RPoqDE045HQrBBBB:2yPcm/A4AKpqdyvDE045HuBBBB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23aa4e6717c787d9b7644b97825d0390_NEAS
Files
-
23aa4e6717c787d9b7644b97825d0390_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ