Static task
static1
Behavioral task
behavioral1
Sample
316e0bec6d1a4df14df5b38740fae0f0_NEAS.exe
Resource
win7-20240221-en
General
-
Target
316e0bec6d1a4df14df5b38740fae0f0_NEAS
-
Size
65KB
-
MD5
316e0bec6d1a4df14df5b38740fae0f0
-
SHA1
7225772f82f21cf6e2b35c061912f123a056c8c0
-
SHA256
e97f415a537de4301f649dfdcee991d50e68fc275647075ec6932292057d2b00
-
SHA512
a64a8a147699993b6eb8fdddb27676343f6050b6adbd1f903942c5682a0886eef9fa928097e9da86764d1ff5021ccfda9564086a56478218a3a83b43295cbc60
-
SSDEEP
1536:BfQZdsjpyUbtweP2j6BZvWhxGSomdCINi1Ws4PMKD:B1ZZwPW3KGodCIitUzD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 316e0bec6d1a4df14df5b38740fae0f0_NEAS
Files
-
316e0bec6d1a4df14df5b38740fae0f0_NEAS.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE