Static task
static1
Behavioral task
behavioral1
Sample
26e3cbfd968bd3730e9d071217add400_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
26e3cbfd968bd3730e9d071217add400_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
26e3cbfd968bd3730e9d071217add400_NEAS
-
Size
14KB
-
MD5
26e3cbfd968bd3730e9d071217add400
-
SHA1
179121d9e51aa416e3f42410687c3a270a16f015
-
SHA256
a940f06a381f5f9961a155c58ef3e9f935f21172e3b378618d1f2f30d65243b4
-
SHA512
a39c6cb5eb428707e32c15eb31d53e2b5b9dfdcb1f3af24e4d6050ad55941c738016c03c0d2209b7527473e30aa863b3d5ce133eb311d680dc368793c97024ec
-
SSDEEP
384:Bm2HQ2xzUqEV4ftghkGtaADE045HAPHHH:MStxz3o4ftgaSA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26e3cbfd968bd3730e9d071217add400_NEAS
Files
-
26e3cbfd968bd3730e9d071217add400_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ