Static task
static1
Behavioral task
behavioral1
Sample
500d2ab8cd6864b4e857e30b8267bf50_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
500d2ab8cd6864b4e857e30b8267bf50_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
500d2ab8cd6864b4e857e30b8267bf50_NEAS
-
Size
14KB
-
MD5
500d2ab8cd6864b4e857e30b8267bf50
-
SHA1
0fcf8416ee6f20e319f8b8283afe9e31085d126d
-
SHA256
7cfde9ed5ebfa1ee736ce7a13bbd87a58d2229426a62844d0a6e611864293105
-
SHA512
1e8c254191db7157c9465dc7a0efe627a7b99644013121017463493ee897a43939bacd5011cfeca77537017ceff188004915521b1070911e96cf712c8e4fb0de
-
SSDEEP
192:xd2x8M85kadVl6sihF40EULjMTpJIXspFFh/6DiIOqDE045HQBDDD:32x8NihmBsjWpJT5gTDE045H8DDD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 500d2ab8cd6864b4e857e30b8267bf50_NEAS
Files
-
500d2ab8cd6864b4e857e30b8267bf50_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ