Static task
static1
Behavioral task
behavioral1
Sample
db4f25cd5d06b10a575af96b1e44e180_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
db4f25cd5d06b10a575af96b1e44e180_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
db4f25cd5d06b10a575af96b1e44e180_NEAS
-
Size
124KB
-
MD5
db4f25cd5d06b10a575af96b1e44e180
-
SHA1
015d2938554f50ce5f87341d65f9b9746dd3c117
-
SHA256
9458ee2328a9bc2da0ad26e8da44d53c5e2eb676bf779919bf936cf9e0a31a22
-
SHA512
dbc650084e4e4d3816e5aed334b10a3426d8b7b11ee8172c58e9e5cccd07c682ed2efcf6c9035ea6340cff0473b48432364acf97362bb21953eafa14235f17de
-
SSDEEP
1536:0X4df73op0PC3edcPR2YkytPE+dPLTRa2nRxIDXMvgXq8qMse005Qey:ndfcQit8+dP3xIb2gaD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db4f25cd5d06b10a575af96b1e44e180_NEAS
Files
-
db4f25cd5d06b10a575af96b1e44e180_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE