Static task
static1
Behavioral task
behavioral1
Sample
a8ba1147f1a4144f371e59ccf1437000_NEAS.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
a8ba1147f1a4144f371e59ccf1437000_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
a8ba1147f1a4144f371e59ccf1437000_NEAS
-
Size
1016KB
-
MD5
a8ba1147f1a4144f371e59ccf1437000
-
SHA1
34ae79a0c72b05f703dac348d64b97eb31628177
-
SHA256
92f4cf5f5c5d9f43680526697bc5008076e783cdd605d7d98249558e64443434
-
SHA512
c0ba6edffc633ff9aad86e0160c269babfdb45078ac7f35351b6f44b08462bc0b8ffd9a7af27745a159c2aa6d98d7a1681cbdfa7a5cfd9acf919c71378cf2386
-
SSDEEP
24576:A0D5rO6gIyZrPljb167/uNQ0RxcZMkQF8tOUvl8MtfPef3afNSOvZ4:tDk67yZVpw/YRR2M9Q3bn7l1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8ba1147f1a4144f371e59ccf1437000_NEAS
Files
-
a8ba1147f1a4144f371e59ccf1437000_NEAS.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 459KB - Virtual size: 460KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.mdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 544KB - Virtual size: 544KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.resour Size: 11KB - Virtual size: 900KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ