Static task
static1
Behavioral task
behavioral1
Sample
d243db345c8ab3d86e8f962bc7c8955c_NEAS.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
d243db345c8ab3d86e8f962bc7c8955c_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
d243db345c8ab3d86e8f962bc7c8955c_NEAS
-
Size
80KB
-
MD5
d243db345c8ab3d86e8f962bc7c8955c
-
SHA1
a524c7074f7338721e9d57842b2f82200f00060c
-
SHA256
912d8d725faaf8ac2e5dc920ee25f312865a21f96875ba9bf6b8aec54d93712b
-
SHA512
f4d919d956411e312c124d1a67ab646f475bdf9dd0c7171c5b948670095e3ce4cb65e66ad3e9890b2808d5d4b74292bb37a18329c96836611e570e246eff8b59
-
SSDEEP
1536:WiDYWTWKd1C/sL5Xw5f6WMhnaB4c3Ka7Zp6FeJuqnhCN:Wcd00dA5SWMhng4MKa7z6FeJLCN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d243db345c8ab3d86e8f962bc7c8955c_NEAS
Files
-
d243db345c8ab3d86e8f962bc7c8955c_NEAS.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ