Static task
static1
Behavioral task
behavioral1
Sample
68022a9cc495ca416aa3d864cd95be50_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
68022a9cc495ca416aa3d864cd95be50_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
68022a9cc495ca416aa3d864cd95be50_NEAS
-
Size
14KB
-
MD5
68022a9cc495ca416aa3d864cd95be50
-
SHA1
a8068d2cf33fa55d3b356c741a912a81d455929f
-
SHA256
b50e0760d8ba893752c300bd9d69cd9e419c4a5bd7a92d22e710be174f497df8
-
SHA512
a9f06a17fa839dd5c48c6d9e8d206d420bdb6f3aacc0ce8b18831f1df4533ccca7b0b47ec6f18286c925c174c88d6e2983c699e5873c97e6c48a8e5562d06467
-
SSDEEP
384:0m5KZyfHx/5Y8hcbFW9CgDE045HxDDDD:0lZyfHx/3cRWhAbDDDD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68022a9cc495ca416aa3d864cd95be50_NEAS
Files
-
68022a9cc495ca416aa3d864cd95be50_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ