Behavioral task
behavioral1
Sample
5190b58d0e94b6bdf7ce5e66c02d4910_NEAS.exe
Resource
win7-20240419-en
General
-
Target
5190b58d0e94b6bdf7ce5e66c02d4910_NEAS
-
Size
54KB
-
MD5
5190b58d0e94b6bdf7ce5e66c02d4910
-
SHA1
d5085f709db0a4e2302c06408e078c2e87391347
-
SHA256
a32a3a99436278f3144f1229b1477c82a84214f5247f621938f5426bb9eb7c67
-
SHA512
eb8a47b9b5f06302b140ad386efcc5b64b195b89e0a39d1ccc1cfc48220debc604efff3a89b98282e204385bf4267b5f2989f4769a02f1662102e7bbe9320f29
-
SSDEEP
384:+SDuuOFZyUVpULCgDb2prxVTw24iJ6Al6z+yX0f0BT2EpmuKowBpyUUep4+2yiiZ:3DcZyUpULCgod/J96ayXv/pWnnAa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5190b58d0e94b6bdf7ce5e66c02d4910_NEAS
Files
-
5190b58d0e94b6bdf7ce5e66c02d4910_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 36KB - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE