Behavioral task
behavioral1
Sample
9150219be34de9e820cbcadc481b0550_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9150219be34de9e820cbcadc481b0550_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
9150219be34de9e820cbcadc481b0550_NEAS
-
Size
224KB
-
MD5
9150219be34de9e820cbcadc481b0550
-
SHA1
3c9199c0a2b3c059951a28596d30e29b33d1ade6
-
SHA256
47c2fb73bbf101848f6ad4ac628e21b6e846bc60d890b2984817abc42ce901d4
-
SHA512
d88f1699959e73b80ac40d06864258d7c9a8cd54eb94f68be6d82bd284f1eec402bf20a2b5f8558ecfaf58d4552ce4148eaa93345bb07c562f1e2e922aaa9856
-
SSDEEP
6144:ZjluQoS/Io5RiwkV6GZFy8T9qCPwX6gexwfqFq:ZEQoS5c6Gjt90KnmqFq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9150219be34de9e820cbcadc481b0550_NEAS
Files
-
9150219be34de9e820cbcadc481b0550_NEAS.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.exjvk Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ