Behavioral task
behavioral1
Sample
637c33eced75fc9721825c7be108d270_NEAS.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
637c33eced75fc9721825c7be108d270_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
637c33eced75fc9721825c7be108d270_NEAS
-
Size
594KB
-
MD5
637c33eced75fc9721825c7be108d270
-
SHA1
055a6633091fcfc0c020d7db7e24582b1aab20e8
-
SHA256
42a9b7d63c2aea4fd7694c13003c56b6c8453013dbf4f3ec6696235291b962fe
-
SHA512
86a61dc1430e41dfa6cc77fdf6264400ef9ecdbd329a393fa463f7388bc2fb1601def6a164b8fbec3a99e0e33561fe2a75320bd08cb427ca83a9e604281f6edb
-
SSDEEP
12288:7tKe6Zv23YLVFhBsC8iFHSs7xPY1f6HriPwU8mNCZZfkdrPvNS:v6Zv2ivhBVnFys7xP86LkRCMdrI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 637c33eced75fc9721825c7be108d270_NEAS
Files
-
637c33eced75fc9721825c7be108d270_NEAS.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE