Static task
static1
Behavioral task
behavioral1
Sample
91eec4bb7b38d97bb9f57a0eed5f4320_NEAS.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
91eec4bb7b38d97bb9f57a0eed5f4320_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
91eec4bb7b38d97bb9f57a0eed5f4320_NEAS
-
Size
64KB
-
MD5
91eec4bb7b38d97bb9f57a0eed5f4320
-
SHA1
45156f65760529f261a6395510d98995f40a5a8c
-
SHA256
23921ea95e9e8965ead3158a389799e3e3be5863c81b2778de2daf9a8b63c805
-
SHA512
eb8e46a5853ead6e1bf654eda80a2d346744c80206107427a238073774b2347851cc025216f7bf084b98c4218063ee08016b26405d3c83c87bbde5fdbdd71b6e
-
SSDEEP
1536:IyQGLM234ndZhHWJZJqXp1Cm0Bq1VlnV1iL+iALMH6:8s/34ndZhH2ZZPSVlnV1iL+9Ma
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 91eec4bb7b38d97bb9f57a0eed5f4320_NEAS
Files
-
91eec4bb7b38d97bb9f57a0eed5f4320_NEAS.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fldo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ