Behavioral task
behavioral1
Sample
43a873ecd6bbf0da5d37634ef63aa270_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
43a873ecd6bbf0da5d37634ef63aa270_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
43a873ecd6bbf0da5d37634ef63aa270_NEAS
-
Size
770KB
-
MD5
43a873ecd6bbf0da5d37634ef63aa270
-
SHA1
930896740b07a35f3cb0a4d5c8eb358b3bc28af6
-
SHA256
6c5879274ff418d9c15459276b46f0854022dfbff922fd1d9b2b121e129bb196
-
SHA512
bac0ca9430d16862ac08f2732385a03d870b4508065f15cfc266e5b635b335f21f0d23aa0dc92997221f0b8b187bddc2290b4b1f82f1deb62a5709a10776fdda
-
SSDEEP
12288:CEQoSsrZGIznfSAcel35+xcXOCn8HSkNIqT3ybc88VbMjxkj4/xPccJ2MvXQd1j4:CqVzncer+gH8HSSIq1VbCSMc/4Qe4q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43a873ecd6bbf0da5d37634ef63aa270_NEAS
Files
-
43a873ecd6bbf0da5d37634ef63aa270_NEAS.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.g Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.d Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE