Static task
static1
Behavioral task
behavioral1
Sample
a38ff28de09b4799dc3bbcbe0380fd90_NEAS.exe
Resource
win7-20240221-en
General
-
Target
a38ff28de09b4799dc3bbcbe0380fd90_NEAS
-
Size
9.7MB
-
MD5
a38ff28de09b4799dc3bbcbe0380fd90
-
SHA1
06eb2277b0e1de01909b186006030bc30eed84ab
-
SHA256
e1ad7d94a73058684bd5bbdcc8a1027e920c8dee4457e5ee0c22336633fd6e32
-
SHA512
4efc8d2b3e1bba2abf5b37e69ff1e3f1024f3176a2143560cd892b6c882e56b6fc179e029693f785a2dff08c8d1a7df66a3d7e3c9ba7208923513a55853635f8
-
SSDEEP
49152:HTi38MakAcyX/PlpjcnH3npV/YsKvbt97S2xIabXtJlIwE74DNZLFF748XqXXP6a:HTfXLnDLpnlIwu4JB4eqXXSa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a38ff28de09b4799dc3bbcbe0380fd90_NEAS
Files
-
a38ff28de09b4799dc3bbcbe0380fd90_NEAS.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ