Static task
static1
Behavioral task
behavioral1
Sample
875f7af879ac5b7328cdf5652e648700_NEAS.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
875f7af879ac5b7328cdf5652e648700_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
875f7af879ac5b7328cdf5652e648700_NEAS
-
Size
80KB
-
MD5
875f7af879ac5b7328cdf5652e648700
-
SHA1
34ae0a16ea894898906d21fdc8e4601f6883ec6a
-
SHA256
d911c3f9b0bb2d1883775150e18fae8149e7862a1e2a15589f82e7cad829e772
-
SHA512
d467e6fca5fa4af9735f171ee3080775e2295ecf2c1d27db740b9fa9984607410601fc4f3496be890069c29efa67b0d147fc1b59842a6ff22640a93afb5e2589
-
SSDEEP
1536:mOZ7n7eDy+40TD/K0+UVDXrYXyb36y0e9M:mOZb710X/K0+UVDbYXI3UK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 875f7af879ac5b7328cdf5652e648700_NEAS
Files
-
875f7af879ac5b7328cdf5652e648700_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ