Static task
static1
Behavioral task
behavioral1
Sample
0c11ef3d12dbc90744aee38542926160_NEAS.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0c11ef3d12dbc90744aee38542926160_NEAS.exe
Resource
win10v2004-20240426-en
General
-
Target
0c11ef3d12dbc90744aee38542926160_NEAS
-
Size
273KB
-
MD5
0c11ef3d12dbc90744aee38542926160
-
SHA1
b9637b62717b9b2912fab1994c4e7c2b166b692c
-
SHA256
f6cf880b82f2747ec575ffb25704e620eaa8a9c2a4cc28162e3728234b1d4525
-
SHA512
edfb10f3939463fa359367203d3076f258b357b477ecaf9ceb5440b4738a0f0ac43567e274f451450efbf0ecb32e31bb040971c7da5fa32b502c12009825be64
-
SSDEEP
6144:rqppuGRYx4H712f/SBTpzZA6rXD40b+7TJsK:rqpNtb1YIp9AI4FsK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c11ef3d12dbc90744aee38542926160_NEAS
Files
-
0c11ef3d12dbc90744aee38542926160_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
NDltoTPW Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tJrdyPER Size: 177KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE