Static task
static1
Behavioral task
behavioral1
Sample
c56d0deb2b2d08e2d490bb712e2195b0_NEAS.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c56d0deb2b2d08e2d490bb712e2195b0_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
c56d0deb2b2d08e2d490bb712e2195b0_NEAS
-
Size
66KB
-
MD5
c56d0deb2b2d08e2d490bb712e2195b0
-
SHA1
22d9493f60f788aa08646bf3d4a9bf317b81d133
-
SHA256
3d6a82d3be7de2612e51f2faaf72f0a6a7ad780762a270b095208963e52a9bae
-
SHA512
fec8df62d832944ee96e99db80c08eb15eab319e9b09704c660122af2178037577557aa578f76eae6cd16ebe587e9bb4ad68495c0f7053763316d999ee003139
-
SSDEEP
1536:EHfetdklPp+07gDSrB8Xru2zGeJxgawTzpXzrDJrXin:IeklMMYJhqezw/pXzH9in
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c56d0deb2b2d08e2d490bb712e2195b0_NEAS
Files
-
c56d0deb2b2d08e2d490bb712e2195b0_NEAS.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 50KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE