Static task
static1
Behavioral task
behavioral1
Sample
85ec68ed8a68b36298bec4ed5813a3d0_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
85ec68ed8a68b36298bec4ed5813a3d0_NEAS.exe
Resource
win10v2004-20240226-en
General
-
Target
85ec68ed8a68b36298bec4ed5813a3d0_NEAS
-
Size
500KB
-
MD5
85ec68ed8a68b36298bec4ed5813a3d0
-
SHA1
d7c66ced82802dc3b6fc4f7d1329fc36bdc2c1e2
-
SHA256
152525555184193459001dc072888dcdbb920fe806c4acc47e267a1ed8d19139
-
SHA512
3d42ffcdee166e07ccbea91d6746edab47d0d79bea253c1b6b431fb3002561fa0928c534d5ace16ce65f2f36e514415a5263f7e0848c3cb0b4b693e185d85074
-
SSDEEP
6144:eDbUslxILPlAvU/xIfZwX0n9SzxEqD2teTXPEIb4hAa8nY/cm6rgCe+HNplya7Mk:eDAslKYG+YVEmP/LlAr41t8nMi23/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85ec68ed8a68b36298bec4ed5813a3d0_NEAS
Files
-
85ec68ed8a68b36298bec4ed5813a3d0_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.htext Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE