Behavioral task
behavioral1
Sample
NEAS.c6a5b60e18853c928948219efad66660.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.c6a5b60e18853c928948219efad66660.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.c6a5b60e18853c928948219efad66660.exe
-
Size
116KB
-
MD5
c6a5b60e18853c928948219efad66660
-
SHA1
9a9da5380b1e437628774737386371104c724936
-
SHA256
e895aef71fc79c02133532f3344075b71bc949da04960e45b6936d83e8705575
-
SHA512
d88c86ff441836c06d36859b2dc020d05e1bb4e2b44cc98ba2aedf67149ca6f909b7f56e4557c13675e7043a4b3de4307976f7463657d0c1c169b8f910fd8953
-
SSDEEP
3072:dRjzhZWxivgmhbI/pqqsFUCN3R96ZI+HpgvQout:/XC4vgmhbIxs3NB2puQoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c6a5b60e18853c928948219efad66660.exe
Files
-
NEAS.c6a5b60e18853c928948219efad66660.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.exjvk Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ