Static task
static1
Behavioral task
behavioral1
Sample
546d6f5b1ef671f3acc260ef1926dc20_NEAS.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
546d6f5b1ef671f3acc260ef1926dc20_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
546d6f5b1ef671f3acc260ef1926dc20_NEAS
-
Size
475KB
-
MD5
546d6f5b1ef671f3acc260ef1926dc20
-
SHA1
b71513069c846dd6fe2aacd789ce990981f4c230
-
SHA256
4284b276e256fb3783cf04f39a92a455132355b0f789b56c48ecb7faa5dd919b
-
SHA512
19c1ce162c29ce5e5d6ac52c3201e5ccd5c0d0cef9fc53d387f85b23325b3f49a349027dc9e6fe7cb19ed2063d2ce4d2f706b6d3fcb01126b4fc30dad520c325
-
SSDEEP
12288:HxN5JkuAgIWlMZlgtoyewjVFJXKHCRhq6gkBqS1:HxN5GuqsMZlg6yPxHXKHCRYnW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 546d6f5b1ef671f3acc260ef1926dc20_NEAS
Files
-
546d6f5b1ef671f3acc260ef1926dc20_NEAS.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 702KB - Virtual size: 701KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ