Behavioral task
behavioral1
Sample
e32b4b2cf672e89c80409fe04418db40_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e32b4b2cf672e89c80409fe04418db40_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
e32b4b2cf672e89c80409fe04418db40_NEAS
-
Size
108KB
-
MD5
e32b4b2cf672e89c80409fe04418db40
-
SHA1
2c96109c460997152d3a92e946fc46b419072de7
-
SHA256
c32b535df85ddda6b9f75baf9c750d3ca5175ccc8f86f7593608289e25b1ccd2
-
SHA512
d5743804ad88f57a8db2f5b89ff1a19651f5704ecc58f949871a4fb5f8bb1e792e04acd962f44124e89eb9fee0685c0ddbdc0e5977e3b56027c053c4fa722c4c
-
SSDEEP
1536:NzUIb25A8ULw005o09WDuYHGjUAsOwRD2h+E:dUIbS5xquYmSOwRA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e32b4b2cf672e89c80409fe04418db40_NEAS
Files
-
e32b4b2cf672e89c80409fe04418db40_NEAS.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE