Static task
static1
Behavioral task
behavioral1
Sample
3150db8c170e761ae0fcd698aa786080_NEAS.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
3150db8c170e761ae0fcd698aa786080_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
3150db8c170e761ae0fcd698aa786080_NEAS
-
Size
47KB
-
MD5
3150db8c170e761ae0fcd698aa786080
-
SHA1
5c1349f27901764e117424a1abc32db5d6ae43ae
-
SHA256
3dbb0711922169e42b9ec4b1031b7329f0e2e596f52130c9395c2d83620f8194
-
SHA512
98e234dc7d9b736120aebae331a75a661d9cc6c02d4c2445642d6b948ba93817ce440828c3aceb7de04da8e5b30d8c4376ddeb3f87d1af5493e80b71e3d4594f
-
SSDEEP
768:6msqjsZAj7VFYoeco6iCCa4Hq18wo3BEsiE:rHjhFYoe/6r7oqCdbj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3150db8c170e761ae0fcd698aa786080_NEAS
Files
-
3150db8c170e761ae0fcd698aa786080_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rsrc Size: 43KB - Virtual size: 72KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
coderpub Size: 2KB - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE