Behavioral task
behavioral1
Sample
74c0a6ce070c6d025cc7ca015a062a1eb57cf83b80db56de92add1858cd8b6dc.exe
Resource
win7-20240704-en
General
-
Target
74c0a6ce070c6d025cc7ca015a062a1eb57cf83b80db56de92add1858cd8b6dc
-
Size
220KB
-
MD5
a2f191b09126d18ee8815e81505d00d8
-
SHA1
5f16a79fd5cb730c24c0a141f28dff78b903e009
-
SHA256
74c0a6ce070c6d025cc7ca015a062a1eb57cf83b80db56de92add1858cd8b6dc
-
SHA512
092b8ca72c5a3e04bffc89736c89acaf32d16d3c2d41d677fe10ceff00db7e4162c85f3f0a0e4d47704bef7f2dfc2a93419eb1ab56db46fcb2502fe69465268d
-
SSDEEP
768:NfMEIvFGvZEr8LFK0ic46N47eSdYAHwmZ9p6JXXlaa5uA:NfbIvYvZEyFKF6N4yS+AQmZYl/5
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Signatures
-
Neconyd family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74c0a6ce070c6d025cc7ca015a062a1eb57cf83b80db56de92add1858cd8b6dc
Files
-
74c0a6ce070c6d025cc7ca015a062a1eb57cf83b80db56de92add1858cd8b6dc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE