Behavioral task
behavioral1
Sample
4cc50089bc5513fad1a989dcfb809020_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4cc50089bc5513fad1a989dcfb809020_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
4cc50089bc5513fad1a989dcfb809020_NEAS
-
Size
40KB
-
MD5
4cc50089bc5513fad1a989dcfb809020
-
SHA1
30e142a4ba1116d6dfc2319e9d7ee91a8ee4ca00
-
SHA256
b2b606e78c20e73281992c391236f5fb9275d0096bc634deaaf3c30fda05af5e
-
SHA512
852abbcf337aa0abadf259c159a33a4501d962d31219a019e4bff0e89c2a031718d348c990fdb73433fc2ecfc645e567d8db6baba945a1d339105b33c85dac5b
-
SSDEEP
768:yiYoIfHbL8KatMHv+7dwwaleRp2OuyamBlabCY787fsByCc:XbyYt7LagG3N13oDWyP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4cc50089bc5513fad1a989dcfb809020_NEAS
Files
-
4cc50089bc5513fad1a989dcfb809020_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.extrel Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE