Static task
static1
Behavioral task
behavioral1
Sample
0a4ff7feffe36761218d2393fd438060_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0a4ff7feffe36761218d2393fd438060_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
0a4ff7feffe36761218d2393fd438060_NEAS
-
Size
90KB
-
MD5
0a4ff7feffe36761218d2393fd438060
-
SHA1
49e19863c5b7563c0ef77ec93126350280d14ef9
-
SHA256
306c7e5d60ee436daec4c564c7209c8fc93b56d80771df3186bad4013713b7c0
-
SHA512
96ff5386e23fba5c21a97d51c6f82601f3db080098f26beacf855142d3122e0f1f8b98569e527b493980c03cc5738a180f67af48accc71277417483c43ca5c85
-
SSDEEP
1536:HQnXbng852kVoIxsCqdIUY3q2UlrJVTctJmdc7Pz56m4wcfERM:KbAUogIdIR5UtbYJPztjcf8M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a4ff7feffe36761218d2393fd438060_NEAS
Files
-
0a4ff7feffe36761218d2393fd438060_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12.2MB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 288KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ