Static task
static1
Behavioral task
behavioral1
Sample
e64d2ed07bf616522ab0d6420de4c210_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e64d2ed07bf616522ab0d6420de4c210_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
e64d2ed07bf616522ab0d6420de4c210_NEAS
-
Size
3.2MB
-
MD5
e64d2ed07bf616522ab0d6420de4c210
-
SHA1
87ea63f564cc35e52054200cc998eeadbc7dbbdf
-
SHA256
c434ec94dff578849b87215f755ff79b58a379503e25d015e9b242d97dfd0491
-
SHA512
6cd2fa115d3e84a2d8580f7890ebe0425055a4ee30e23d85a2de8dcae7689ec99325c6ce239d9ea853a13e6298850347c1a1734edd5ad924461e217e076f3a43
-
SSDEEP
49152:kbtL2tLSUv3fbtL2tLSUv3Qg6ZqhaK6zbfqdlb6Ez:SV2VSwV2VS1xAt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e64d2ed07bf616522ab0d6420de4c210_NEAS
Files
-
e64d2ed07bf616522ab0d6420de4c210_NEAS.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ