Static task
static1
Behavioral task
behavioral1
Sample
ec4b0e6f232f69b8a39761e97b193db0_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ec4b0e6f232f69b8a39761e97b193db0_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
ec4b0e6f232f69b8a39761e97b193db0_NEAS
-
Size
14KB
-
MD5
ec4b0e6f232f69b8a39761e97b193db0
-
SHA1
e03bfa2b6c10de04f285b4829061108b41a93819
-
SHA256
27cd9e19e502259d387e5488ce73e82fbc312fe0b35c265ce32a8f88aa5764d6
-
SHA512
4ddc44d1e8bb5ae9cc8b9ca18867757c83626328ab7b89810f29c50e1a982c4e2dcc283beac8be7d14d3c3bcbe669a07356a4356ce2e6def4533edfd59f70be1
-
SSDEEP
384:tuEjRWZrsRuTtHsXG5G5DE045H8H5H5H5H5H:tuEjkZrsuEZAKH5H5H5H5H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec4b0e6f232f69b8a39761e97b193db0_NEAS
Files
-
ec4b0e6f232f69b8a39761e97b193db0_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ