Static task
static1
Behavioral task
behavioral1
Sample
f187b7e4e6754cde67acabe7840a7ba0_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f187b7e4e6754cde67acabe7840a7ba0_NEAS.exe
Resource
win10v2004-20240226-en
General
-
Target
f187b7e4e6754cde67acabe7840a7ba0_NEAS
-
Size
80KB
-
MD5
f187b7e4e6754cde67acabe7840a7ba0
-
SHA1
5ed42f0fd82a80bdfb1dfdf6ce5482853001b063
-
SHA256
1a47018afbea2a5b4a9354d01435173c944342ea7624698d4ac263dba51c06c1
-
SHA512
7efc32eedef6b4902640395aafc5df454780bff49c9f174c172cac90522db93047c20a450381b4c89076ec30e2c1e983d07e5057b6a990c50ba88932b422bff4
-
SSDEEP
1536:bDcWLfIbgEp10gyX/dtnTHNWnnn6222229H:bDXL0n0gyX/d1re22229H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f187b7e4e6754cde67acabe7840a7ba0_NEAS
Files
-
f187b7e4e6754cde67acabe7840a7ba0_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.htext Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE