Behavioral task
behavioral1
Sample
9257f841f2da347c78cb7f75eff8a6c0_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9257f841f2da347c78cb7f75eff8a6c0_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
9257f841f2da347c78cb7f75eff8a6c0_NEAS
-
Size
312KB
-
MD5
9257f841f2da347c78cb7f75eff8a6c0
-
SHA1
9a35c46717c5b9725bbd320406aabfb758506bea
-
SHA256
0ba65c6a768cc45e3da72b0c39cb404b05cdb10e939fd36f0df81b77a94b1714
-
SHA512
569d6394615af1527800b384cbe7f382fb9cf7f673367fa5590f6685d405a86ac84f7567dea360862f2114ae0f4a5f2fbf501cb5303e2c6ca5e70903b85d248f
-
SSDEEP
6144:JiQSo1EZGtKgZGtK/CAIuZAIuTQSo1EZGtKgZGtK/CAIuZAIu9:AQtyZGtKgZGtK/CAIuZAIuTQtyZGtKgE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9257f841f2da347c78cb7f75eff8a6c0_NEAS
Files
-
9257f841f2da347c78cb7f75eff8a6c0_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE