Static task
static1
Behavioral task
behavioral1
Sample
662f13ce67c4cc2034f5c4c9d52a9af6_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
662f13ce67c4cc2034f5c4c9d52a9af6_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
662f13ce67c4cc2034f5c4c9d52a9af6_NEAS
-
Size
3.0MB
-
MD5
662f13ce67c4cc2034f5c4c9d52a9af6
-
SHA1
38e390df7b67bb001a48627cb7b7078836a0f3ef
-
SHA256
6c58dc5f9ac5c65f2b0107bed32c5f22ed03e0d659311a84b5959c3ff1a91e33
-
SHA512
a193b723ff8fe73fe36d9bacba3dfc5dcec7cce3a074d6be0b03585ee588212e520711e7e2bee982cbd48c7798a58f39fda8fa30bfe805360e2e60531039aa63
-
SSDEEP
6144:R3Te8ySm8hQAAIfFrRXuEE+0l97mKwKtOHVJ86JQPDHDdx/Qtqa:E/zkFF+EExZmKbtiVJPJQPDHvd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 662f13ce67c4cc2034f5c4c9d52a9af6_NEAS
Files
-
662f13ce67c4cc2034f5c4c9d52a9af6_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 208KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 148KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE