Behavioral task
behavioral1
Sample
2910154fbde6a4978454c8c56bd92090_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2910154fbde6a4978454c8c56bd92090_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
2910154fbde6a4978454c8c56bd92090_NEAS
-
Size
1.3MB
-
MD5
2910154fbde6a4978454c8c56bd92090
-
SHA1
d1fa3707545cff3e8a5c07375e850087ad6a7d05
-
SHA256
81b3500093a1be956c9211d50112efb91bc506ac78933e820b888efbdadb686b
-
SHA512
77c7900e4aab4f316ba24f885adde537ef0a482195a70142583e11eaaadd9f1824b3a03baa8e6df1198529ca13ce2762cb85335f5d64e9747bc9cd81d8576d4a
-
SSDEEP
24576:NSLY/Gc40mgRfE7AZYzBlBjbRjfbcko+tnoHBr62Cor6fx7KSHoSHWztbvayp:N9Gzxcs7AZ4LtrbcnMzorG+ftT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2910154fbde6a4978454c8c56bd92090_NEAS
Files
-
2910154fbde6a4978454c8c56bd92090_NEAS.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.lygia Size: 512B - Virtual size: 4KB
.o Size: 512B - Virtual size: 4KB