Behavioral task
behavioral1
Sample
bfe321e5332515094a7eb69c94ce1e90_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bfe321e5332515094a7eb69c94ce1e90_NEAS.exe
Resource
win10v2004-20240226-en
General
-
Target
bfe321e5332515094a7eb69c94ce1e90_NEAS
-
Size
517KB
-
MD5
bfe321e5332515094a7eb69c94ce1e90
-
SHA1
9854555124a0f760617a468be9f5694d77f32c5b
-
SHA256
3a23fbbda541349896ad6facf0bc6b9da5d8a73800a8d0e71a31af568178a009
-
SHA512
56e3fb6ccb2891d8ebe9104ad9e7e855d73bd670719d62950c071efeee7235704fb648d6cf6efbaee5b821c44937ea34d6617559584ebd384ae417a90f57140d
-
SSDEEP
12288:NPKLyqGmVU0gabq42jjChEZ2/V993nHeti0wFsgaUhjV:NSLCmVgaz3Ek1n+ti0NgRJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfe321e5332515094a7eb69c94ce1e90_NEAS
Files
-
bfe321e5332515094a7eb69c94ce1e90_NEAS.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.lygia Size: 512B - Virtual size: 4KB
.o Size: 512B - Virtual size: 4KB