Static task
static1
Behavioral task
behavioral1
Sample
81edaf0a7cb28e5235e2e563d5e57d60_NEAS.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
81edaf0a7cb28e5235e2e563d5e57d60_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
81edaf0a7cb28e5235e2e563d5e57d60_NEAS
-
Size
472KB
-
MD5
81edaf0a7cb28e5235e2e563d5e57d60
-
SHA1
ff621497a55cdb7bc1d37d22f9b761125a3f6ec1
-
SHA256
af1b8f72b0f5e87e58033744bcd19ec34e0c5368780c286c6c8340c365c1805b
-
SHA512
d678741161975b3610d39aa52be1a08353040192b6370b70d7b1ff30f94ef1ec9afb023ab891e24b230ecb0830fb8bffb5b334ef1a94d6ba3f57702695140131
-
SSDEEP
3072:1N8RinudiP52xx67lLd0iHDo9Nw+bLpHdJTBDtGrUB2:QkgiPA6ROPw+RHJDz2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81edaf0a7cb28e5235e2e563d5e57d60_NEAS
Files
-
81edaf0a7cb28e5235e2e563d5e57d60_NEAS.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ