Static task
static1
Behavioral task
behavioral1
Sample
91851961d56a7ee2ff42c74cee309e10_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
91851961d56a7ee2ff42c74cee309e10_NEAS.exe
Resource
win10v2004-20240426-en
General
-
Target
91851961d56a7ee2ff42c74cee309e10_NEAS
-
Size
488KB
-
MD5
91851961d56a7ee2ff42c74cee309e10
-
SHA1
664d3e837aa9a5eb7a9d98a4527d80d714c50363
-
SHA256
a2a2af73d186fa4338df8e0b70db0a8813b5069b3fa918a3083a1290134c264d
-
SHA512
13c03cb733d0c9f60e35bb6551653767a9491a4c3ec7ed07f6e0f1a710990a8cd50ede1ff7233011908d2d8f271b63903e2bad9452e0f0bcc2530c0bd9b7cccc
-
SSDEEP
12288:V/M9/MP/Mx/M7/Mx/M4/MpBE/Mk/M2/M1:VyK2O2HIBEd7M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 91851961d56a7ee2ff42c74cee309e10_NEAS
Files
-
91851961d56a7ee2ff42c74cee309e10_NEAS.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
kkrunchy Size: 52KB - Virtual size: 6.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE