Static task
static1
Behavioral task
behavioral1
Sample
435172f71ec91309ec6800f87bdb7790_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
435172f71ec91309ec6800f87bdb7790_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
435172f71ec91309ec6800f87bdb7790_NEAS
-
Size
1.3MB
-
MD5
435172f71ec91309ec6800f87bdb7790
-
SHA1
ee5104d8c26b861965cee917ba4410c848ac5cbb
-
SHA256
43203ce4d575ef2ce392c890eb2fa44adee8a1d0375a8ad88b43fe40ad1a7541
-
SHA512
9a3674379d824ea9e0ee259d2981e84aa356b40aee9eac5a139e2b0d350f815c3f6d58d5cc9af4d1bfb39c01b3d6e82ece2153295978f2a02e82224a95813f0f
-
SSDEEP
24576:FPuxCl2Jjp007XBb/sYVF+SSST+SXlmRwEF3v:khPRLsYXvaSXlmmE9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 435172f71ec91309ec6800f87bdb7790_NEAS
Files
-
435172f71ec91309ec6800f87bdb7790_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
FKP0 Size: - Virtual size: 18.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FKP1 Size: 203KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE