Behavioral task
behavioral1
Sample
343799a739db0e5b3749da6035568ca0_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
343799a739db0e5b3749da6035568ca0_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
343799a739db0e5b3749da6035568ca0_NEAS
-
Size
273KB
-
MD5
343799a739db0e5b3749da6035568ca0
-
SHA1
f57e4724ed2c99cd15e11beedbc8f8ac7028dec7
-
SHA256
aa226051f4c7853803d079be9b3ded3d644c28e8a392c8ea305b3b0b1feac7a0
-
SHA512
f2a975ce4c1ad732bbf3cf47dc6029340d76f6f90d1c75dbf71f6b06bdb9dcfb232c17043778a58bb98874f1c1f1d38aa7751b1e39bedb50e5edfdbfbe35ec86
-
SSDEEP
6144:aPR2NgXn6qKalFWOrVZ73aNNVQRpTjI2jBFvj6NUds7+Q0VYP0h8Gz91Mt3:a526BTrVZbScRdjNFKUC7qCGzot3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 343799a739db0e5b3749da6035568ca0_NEAS
Files
-
343799a739db0e5b3749da6035568ca0_NEAS.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 604KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 271KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE