Static task
static1
Behavioral task
behavioral1
Sample
aed10cc4a426c2651cb706019d890590_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
aed10cc4a426c2651cb706019d890590_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
aed10cc4a426c2651cb706019d890590_NEAS
-
Size
14KB
-
MD5
aed10cc4a426c2651cb706019d890590
-
SHA1
08a6f6e586025cb977a7ca982f818c088df2fa80
-
SHA256
70c8a84a8f5f9375f3b513deea4c4da0c44b81614d01927337ef4871868c710a
-
SHA512
5b6e6fbda0ed787b9138c9f01daa134c2114182a5715d05cb28bd5f7b85ba8fcf9a3ea9eea5ec4e89d58f70faa36ad2d591325fd9c37938e18396ef1d5a3cd54
-
SSDEEP
384:yBD8vIGj5FBJiSC31ANxM4A3SWacXWrzLDE045H:yBD8vIGjfalWxMpzbXobA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aed10cc4a426c2651cb706019d890590_NEAS
Files
-
aed10cc4a426c2651cb706019d890590_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ