Static task
static1
Behavioral task
behavioral1
Sample
6df92bdc7b62dc50206a99aadc2572d0_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6df92bdc7b62dc50206a99aadc2572d0_NEAS.exe
Resource
win10v2004-20240426-en
General
-
Target
6df92bdc7b62dc50206a99aadc2572d0_NEAS
-
Size
14KB
-
MD5
6df92bdc7b62dc50206a99aadc2572d0
-
SHA1
2d00368dc4835d51dd3d4e2eb1153e4372f21c87
-
SHA256
8ce651f2f2b4b5a120e5c88883096fbf27eacc984f6880600ddff8c164a1d367
-
SHA512
29ca45552880eeee44798b2ffc996ed77be1fd79d6ff4134fc25958a826b9e6bbfd529869043d7294730c1e01ac20d2b998376cebb80446adf70007b5563fbbe
-
SSDEEP
384:FptffGr79Gz2YzwbBqz9v+GMMDRLlLtxbXDE045HhPPP:LQ7DewbBA+sDPrbzA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6df92bdc7b62dc50206a99aadc2572d0_NEAS
Files
-
6df92bdc7b62dc50206a99aadc2572d0_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ