Behavioral task
behavioral1
Sample
851ae7ce98d3f1ad5ed6cf085cd455f0_NEAS.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
851ae7ce98d3f1ad5ed6cf085cd455f0_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
851ae7ce98d3f1ad5ed6cf085cd455f0_NEAS
-
Size
1.1MB
-
MD5
851ae7ce98d3f1ad5ed6cf085cd455f0
-
SHA1
935ded06e444710057cc851a9e7887523797c647
-
SHA256
8988de34ea0dafa270d15f9c96e1d645385513d4b4bca5338979cbba33809b03
-
SHA512
67c9eba15090a1ef1edb734c8a48a26d722b0a43362e96927e7a6105b15a3ed2f770a9f41b512d62906ce35b0bb283eb9d8f7783826f000270a17c7372523dda
-
SSDEEP
24576:ZnDNb0EzYjQqPjn94cMTyFkcYVxp5G/KmMU67YV8eVfGH+HGypG+2BsU+qB:J96QqPjn9tRYOK40kVeH+HGvrBsnqB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 851ae7ce98d3f1ad5ed6cf085cd455f0_NEAS
Files
-
851ae7ce98d3f1ad5ed6cf085cd455f0_NEAS.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.exjvk Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ