Static task
static1
Behavioral task
behavioral1
Sample
443a0e5d4fd3546d73e21a47f66b237d_NEAS.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
443a0e5d4fd3546d73e21a47f66b237d_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
443a0e5d4fd3546d73e21a47f66b237d_NEAS
-
Size
91KB
-
MD5
443a0e5d4fd3546d73e21a47f66b237d
-
SHA1
8510917af9691cc8505ece890b7100626190f257
-
SHA256
d8a6f3c1d32f0f65681a63298d24c9357432c5f9ecfebaa68a13845cf1e5deb9
-
SHA512
b7120712310692c835834cf5fb620c3ff9af3423980f3d6bb3b4a8d72b2a839fc33a05b965258b1b28980d769c0551452788ccc00e0b6704b245a04dd54d5c46
-
SSDEEP
768:E3gRYjXbUeHORIC4ZxBMldNKm8Mxm8I+IxrjPfAQ4o3Imu+33gRYjXbUeHORIC4f:uT3OA3+KQsxfS4VBT3OA3+KQsxfS4N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 443a0e5d4fd3546d73e21a47f66b237d_NEAS
Files
-
443a0e5d4fd3546d73e21a47f66b237d_NEAS.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 28KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE