Behavioral task
behavioral1
Sample
NEAS.c34cd8081fef22c16aeba7cae784c4c0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.c34cd8081fef22c16aeba7cae784c4c0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.c34cd8081fef22c16aeba7cae784c4c0.exe
-
Size
1.6MB
-
MD5
c34cd8081fef22c16aeba7cae784c4c0
-
SHA1
dcd6b7a3225aaae99dd5e137d7ad0916b44ffdd7
-
SHA256
662516b2cc1e04774f8f00a42f494162005b54bb45bf75c7142ebaaf7fd672d7
-
SHA512
61cd585d48dfb50eaa59e199280b93440f9c92bce4bdf738bc28076a6ad68bae402c02512064d2078a5bc5647040a64dd8e1909b36998cac7cfd0638fa24ec24
-
SSDEEP
24576:NSLAn1TY0BAJYCxZXDkQQjkY0qBZYnDrndsydOCbilSOTpmk6VRQ0Ctn0g+pEcYV:NPTzQXDkWWZYnf+RGuxo3GVV1YvY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c34cd8081fef22c16aeba7cae784c4c0.exe
Files
-
NEAS.c34cd8081fef22c16aeba7cae784c4c0.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.lygia Size: 512B - Virtual size: 4KB
.o Size: 512B - Virtual size: 4KB