Behavioral task
behavioral1
Sample
d514abc178421d7ac13d31b3178fee40_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d514abc178421d7ac13d31b3178fee40_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
d514abc178421d7ac13d31b3178fee40_NEAS
-
Size
1.1MB
-
MD5
d514abc178421d7ac13d31b3178fee40
-
SHA1
3f81629077e92047143a0c985ab07c298ba346d9
-
SHA256
c7f6a90ebdc55515df5c57020b1c9ffdc14527a4877a6f28ac87a5f2893e9c6a
-
SHA512
687872279896106a0cf4edefb5a400f6131a25a0ab0d2ad2e98312139c760b68466e2fb83c1127696a49b0edf8a31ac3403ff8555d0828ad670860c1c31a750c
-
SSDEEP
24576:NSLGTXm3Iv8R/VRtd0pbvFZ7lT2lVnDv8nzdmcRmYM1XAIR66:NHgT/VavFZ7IL85mjYM1XAIR66
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d514abc178421d7ac13d31b3178fee40_NEAS
Files
-
d514abc178421d7ac13d31b3178fee40_NEAS.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.lygia Size: 512B - Virtual size: 4KB
.o Size: 512B - Virtual size: 4KB