Static task
static1
Behavioral task
behavioral1
Sample
79d775f67475ffe15bc01ddada3fd710_NEAS.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
79d775f67475ffe15bc01ddada3fd710_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
79d775f67475ffe15bc01ddada3fd710_NEAS
-
Size
188KB
-
MD5
79d775f67475ffe15bc01ddada3fd710
-
SHA1
34ae022ab156f8d27cca807bcf6a8f25bd7f5a45
-
SHA256
59046896bf17583e1a14626f0f5bbecc82c15e7e86b8a124814889bb1a4303a3
-
SHA512
d6fd970c9be18110bad126b3066a5e678c0b38b719f546a24d9419c1761b9ec8ab8a575dd239aa9c77b5566bff87f4f55742db8fb1cbc453139f71253e7a2020
-
SSDEEP
3072:WNBDaRluw0PzNpGmkoJEbPntccGueyK6uWxjqMaAMj9ZtuF47DK5zm94It6TWrR:WDIuwgdeLX+t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79d775f67475ffe15bc01ddada3fd710_NEAS
Files
-
79d775f67475ffe15bc01ddada3fd710_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE