Static task
static1
Behavioral task
behavioral1
Sample
9386a8c0ed3917be51e192cc9d89f4d0_NEAS.exe
Resource
win7-20240215-en
General
-
Target
9386a8c0ed3917be51e192cc9d89f4d0_NEAS
-
Size
93KB
-
MD5
9386a8c0ed3917be51e192cc9d89f4d0
-
SHA1
d9e4fe1066711c37b2e12a9f42aefc9285416809
-
SHA256
80e5cd57464b9cf3fae1b1dd4fee273fae41e718b4922db43b5e87721a9b5d9c
-
SHA512
0573e5e479fc38c1d5029371bc3adcb50e239f913619265318ca4d1ef7855e026b8164281131900ecdfd5800e4f69e401eb0e2a01b46b10b723f7b6aad4954c3
-
SSDEEP
768:54pt1NSf7M9Syk+IAnTjwm41tYhZV6pudcMiDh7FOaRb8RC1J3AFLT7Dm3UIn4Ug:OVNSf7hyk+I6412V6PMqAax80XAFSrRG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9386a8c0ed3917be51e192cc9d89f4d0_NEAS
Files
-
9386a8c0ed3917be51e192cc9d89f4d0_NEAS.exe windows:5 windows x86 arch:x86
0387d7197769bd3cd788524003bf2efa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteA
ws2_32
WSAStartup
iphlpapi
GetAdaptersAddresses
Sections
.MPRESS1 Size: 39KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE