Static task
static1
Behavioral task
behavioral1
Sample
85a84e724148afcf3f8156f16d54f740_NEAS.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
85a84e724148afcf3f8156f16d54f740_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
85a84e724148afcf3f8156f16d54f740_NEAS
-
Size
3.7MB
-
MD5
85a84e724148afcf3f8156f16d54f740
-
SHA1
60107592bc551a658f4f1ef81da77f5a5b792ccf
-
SHA256
91a2eef2db5c29360cdb81bb879f2ef678012081a26ac35176ad0b84f5e29869
-
SHA512
e0234e91019b97312be5db8cc662f5650c9611304d1c371f0e8796f76f6ed62d851522d9716a10813bd527d9a2a7d36ced88757518462882434a27e00d11edb9
-
SSDEEP
98304:zoqvE2eJX+0ngCSSL6PmFmYrWrUj+ZtPDXU2he0psA:zouedZgFSv1rFjQDXU2XpsA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85a84e724148afcf3f8156f16d54f740_NEAS
Files
-
85a84e724148afcf3f8156f16d54f740_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 537KB - Virtual size: 536KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ