Static task
static1
Behavioral task
behavioral1
Sample
486cfca1e899193a5bf627be0364bab0_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
486cfca1e899193a5bf627be0364bab0_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
486cfca1e899193a5bf627be0364bab0_NEAS
-
Size
5.5MB
-
MD5
486cfca1e899193a5bf627be0364bab0
-
SHA1
b2a7f36f0b4a8ffbc2ab0de2671bb5c0ffac1ec8
-
SHA256
884b703803afcbe523ff132c985940f9ae38e29c62343882e9fa3cb3f95d394e
-
SHA512
95606f9887aa8ab380f56afbd32d15c78ac793f4ce644ebc5fae657268bc2eb3fa03aca67e34b98d180767855275ff2e30c110edaaba413daaceb77316733fe6
-
SSDEEP
98304:ILL3d4QvwVhrxf3ktH5gcbQVqD19Q4bj14qGC/0Gcy1REAbN0+uhiqg72eX:UjmRhatH5UV419NRnM4TKs2e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 486cfca1e899193a5bf627be0364bab0_NEAS
Files
-
486cfca1e899193a5bf627be0364bab0_NEAS.exe windows:5 windows x86 arch:x86
fd4be3da523e5ed1323d5feb2d25adc9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
comctl32
ord17
msvcrt
_controlfp
shell32
CommandLineToArgvW
user32
SetScrollInfo
CharUpperBuffW
Sections
.text Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.8#V Size: - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.htext Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DT5 Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.#kP Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.C8d Size: 5.5MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ