Static task
static1
Behavioral task
behavioral1
Sample
4c9e1442b5b4a25515397c8130fbd760_NEAS.exe
Resource
win7-20240221-en
General
-
Target
4c9e1442b5b4a25515397c8130fbd760_NEAS
-
Size
91KB
-
MD5
4c9e1442b5b4a25515397c8130fbd760
-
SHA1
1411b42c9845b3ba2d6896e8c5f59ab877c8723d
-
SHA256
f96e8ddc0f5d1b330aea957d214eff6f0c6c0f5e70b63dfa45730b80e192c0dc
-
SHA512
c2bd7ca8896a6549efac1dd7ef1263d24a3f7347d85bc8401c939d657a218ba19444517a53193031a613ac166ab749660b94da2c97108c00ba62dfcd2f92ed3b
-
SSDEEP
1536:AQ38vsm02LMSTz2u/DBP4EXfpoggoKrKDnzely4:Aha2B2u7dPfVVKr4nzeX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c9e1442b5b4a25515397c8130fbd760_NEAS
Files
-
4c9e1442b5b4a25515397c8130fbd760_NEAS.exe windows:5 windows x86 arch:x86
0387d7197769bd3cd788524003bf2efa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteA
ws2_32
WSAStartup
iphlpapi
GetAdaptersAddresses
Sections
.MPRESS1 Size: 35KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE