Static task
static1
Behavioral task
behavioral1
Sample
03ef6f66314a1a0ea7d0ea7f084b1620_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
03ef6f66314a1a0ea7d0ea7f084b1620_NEAS.exe
Resource
win10v2004-20240226-en
General
-
Target
03ef6f66314a1a0ea7d0ea7f084b1620_NEAS
-
Size
64KB
-
MD5
03ef6f66314a1a0ea7d0ea7f084b1620
-
SHA1
1c30a74403e1159bc360919cecb9fcfd443e4263
-
SHA256
4e7757f9a71936a8bb1771eba43244e93838a95cb5bc7abd0dfa017efa970cb7
-
SHA512
b61fc41e143326059f0c5b0ddf33e312cb1990ae10c03c6ace53e56303aabf7a915d1ad4e12549156f4b4455db16ef8a470f5744f3656a41c4efdf9cf025bb4f
-
SSDEEP
768:IydycsmDtZfGGtQ3W9Mu6/lSfT2h7ZZxIFbR7kqhqwqRXrBZhhUfn3Dy82p/1H5x:IydhhuPl5D7wwXr9hY3Dp2Lb6XdZgQe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03ef6f66314a1a0ea7d0ea7f084b1620_NEAS
Files
-
03ef6f66314a1a0ea7d0ea7f084b1620_NEAS.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kofbl Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ