Static task
static1
Behavioral task
behavioral1
Sample
8f5740a51ecc9b019111b1206aa3c190_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8f5740a51ecc9b019111b1206aa3c190_NEAS.exe
Resource
win10v2004-20240426-en
General
-
Target
8f5740a51ecc9b019111b1206aa3c190_NEAS
-
Size
127KB
-
MD5
8f5740a51ecc9b019111b1206aa3c190
-
SHA1
6ae7b00b54f2dd4c8bcfb2d224f3aa74e6846ced
-
SHA256
aff0f44197ddda0b7a55b52d3b92b545053574c2b45a8436f902ee85aa9ab7e8
-
SHA512
ebc022044f37c813ed3cd5c1626fc442a87939ca9b0c4f0f7e5972d6d798384a2b8f40c47212b832c7ebaed3165f32f6ac127cda470fa2ba474803b82a9e579c
-
SSDEEP
3072:6OjWuyt0ZHqsXOKofHfHTXQLzgvnzHPowYbvrjD/L7QPbg/Dr0T3rnXLHf7zjPPL:6IH9OKofHfHTXQLzgvnzHPowYbvrjD/O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f5740a51ecc9b019111b1206aa3c190_NEAS
Files
-
8f5740a51ecc9b019111b1206aa3c190_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
428flzvp Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
j898nbej Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
f0y1pkzm Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE