Static task
static1
Behavioral task
behavioral1
Sample
04e85ca84fc0e7d49b3ad74c82c63810_NEAS.exe
Resource
win7-20240220-en
General
-
Target
04e85ca84fc0e7d49b3ad74c82c63810_NEAS
-
Size
228KB
-
MD5
04e85ca84fc0e7d49b3ad74c82c63810
-
SHA1
8ceda241548906245ead9f4d74ba07809d7a5686
-
SHA256
64cc8920142782bc7e652c6034957767ad445a8557284a4a393f40640f6c02fe
-
SHA512
00c886c93e2aa8d7da324f535b6e9e4d9fb629d777821ee12179f32b24187a53925323a8649756966f51b66e521479dd6a9acaf5760e317fd63cf4ce5f744e56
-
SSDEEP
3072:ymb3NkkiQ3mdBjFo73PYP1lri3KoSV31x4xLn/cX:n3C9BRo7MlrWKo+lxKkX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04e85ca84fc0e7d49b3ad74c82c63810_NEAS
Files
-
04e85ca84fc0e7d49b3ad74c82c63810_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 274B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ