Static task
static1
Behavioral task
behavioral1
Sample
eba2d9033291d87338d572cf415801e0_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eba2d9033291d87338d572cf415801e0_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
eba2d9033291d87338d572cf415801e0_NEAS
-
Size
451KB
-
MD5
eba2d9033291d87338d572cf415801e0
-
SHA1
b96702e8c3f1b3150f060c7e880935a42702bc4d
-
SHA256
ef9f13edae185305bdad5fbd6d0c7b08d12d8346d66ee34b34efce394ce9156d
-
SHA512
3bf71246c3d18ae33d7dad7f76bc36dacad2f2f40aa98cc5020ee42b70c991b865c15a13c86b798c51ba6f0f905b3206329194ebad0e6b713bbeb047d4520e1b
-
SSDEEP
6144:dIse0X4i5oxhOtfPvNAp2PzvYoR7nCcVy3Fz3YMR:dIskxAX1AILAoR7nCBZoMR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eba2d9033291d87338d572cf415801e0_NEAS
Files
-
eba2d9033291d87338d572cf415801e0_NEAS.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 292KB - Virtual size: 291KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ