Static task
static1
Behavioral task
behavioral1
Sample
ca622fda8e2ae1944f8890cfb42a3e90_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ca622fda8e2ae1944f8890cfb42a3e90_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
ca622fda8e2ae1944f8890cfb42a3e90_NEAS
-
Size
57KB
-
MD5
ca622fda8e2ae1944f8890cfb42a3e90
-
SHA1
71eb26127c8e61cb2347d8e654ae3d629be813a5
-
SHA256
8e76e700a052ad80f06ad7525d5d75461224eb45476bdc20c551952f90b36f24
-
SHA512
e7ac4e750023349dd739c7f6568be1a883f0c69163acd9a75673594fb67323f092f716a3058995fd22cdf05775e6caed438d47e1ff57b4e5ebf90568045b38c1
-
SSDEEP
768:9qSqC8+N5ozQQRncwxWmNXMX3cX8wtgtzpAXpX8/X/7CUrfbtSqkn:9rqfzQQRamN8835mv7CUroqkn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca622fda8e2ae1944f8890cfb42a3e90_NEAS
Files
-
ca622fda8e2ae1944f8890cfb42a3e90_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 11KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mdwexvv Size: - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
petite Size: 274B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ