Static task
static1
Behavioral task
behavioral1
Sample
27055e2837f63b0f60e1809528942390_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
27055e2837f63b0f60e1809528942390_NEAS.exe
Resource
win10v2004-20240226-en
General
-
Target
27055e2837f63b0f60e1809528942390_NEAS
-
Size
14KB
-
MD5
27055e2837f63b0f60e1809528942390
-
SHA1
c140947f36cf6f344bf683095182c630cb3b9b4f
-
SHA256
9353ac90b9a002b10a5eba803b4f884211ec2c8f27b07edbb24ce0a6ef49c6f2
-
SHA512
02ff8242912cd73763aa6bcca3d5d17fab5fe3cfe884344be97dc765cb09c5d1dd5f108e8bc1aef00eb4f22f211cb911d4beda6374fbf88e4f75959a39dd3a9c
-
SSDEEP
384:miskiXU4gdU3PcTJCCCC7i5i5i5i5i5i5i5i5i5i5pm1FODE045H:miNiXEqKCCCCXjA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27055e2837f63b0f60e1809528942390_NEAS
Files
-
27055e2837f63b0f60e1809528942390_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ