Static task
static1
Behavioral task
behavioral1
Sample
cbb5821d2c8dbf7dc0e806ee73c819e0_NEAS.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
cbb5821d2c8dbf7dc0e806ee73c819e0_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
cbb5821d2c8dbf7dc0e806ee73c819e0_NEAS
-
Size
1.5MB
-
MD5
cbb5821d2c8dbf7dc0e806ee73c819e0
-
SHA1
bfe6f7216c0aeed5cecb1bc7040492ef622883d0
-
SHA256
a0014631b667c05194d5b178f7db57b3fdb17b2c2e301d3cbba3e13253082a6d
-
SHA512
661599074f1ba4b4a7e34b08ba1a0f20f4e7867172ff6948a57b9c1283b9a228661c115164ce2a68f6780a6a9a4321ce9a890422cbd682f7b3c41b077696851e
-
SSDEEP
12288:wHZVm/7ePnv+TWM+6+xTGzgFA+u/x8acJdPACFFbLFi8cj5UQbM72vom:2v+NWu/adRYj5UQOc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cbb5821d2c8dbf7dc0e806ee73c819e0_NEAS
Files
-
cbb5821d2c8dbf7dc0e806ee73c819e0_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ