Static task
static1
Behavioral task
behavioral1
Sample
b5d965fcf95655e0d2d70eb42acdb370_NEAS.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
b5d965fcf95655e0d2d70eb42acdb370_NEAS.exe
Resource
win10v2004-20240426-en
General
-
Target
b5d965fcf95655e0d2d70eb42acdb370_NEAS
-
Size
14KB
-
MD5
b5d965fcf95655e0d2d70eb42acdb370
-
SHA1
36718636d5e05f218f017f7b06e3e866a4107747
-
SHA256
686d69afbc0c9d8ab771d425bf3603d1df1ddac2881846b725afa6995c93f9ab
-
SHA512
4c229f140febe8f9219d4bc47599da2abaf4890a5b05c6cb94ae9bdf902b0c252519951e04187d918930cc0fc12eef11b7b0f4f3979bd9828a10d31f28b59fc4
-
SSDEEP
384:0WuybGs/hr+rGQQQQQQQ82222222NWp+DE045H:0Nybv/h+qQQQQQQQ82222222yUA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5d965fcf95655e0d2d70eb42acdb370_NEAS
Files
-
b5d965fcf95655e0d2d70eb42acdb370_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ