Behavioral task
behavioral1
Sample
9b812b4cae7bf46f35fca323523d9c009f28a037ca7a8a03c716a5499368bc21N.exe
Resource
win7-20240903-en
General
-
Target
9b812b4cae7bf46f35fca323523d9c009f28a037ca7a8a03c716a5499368bc21N
-
Size
71KB
-
MD5
d5705a72992670ee1ddacfd2fa324120
-
SHA1
86d221f9963437a82f8d2c272c68852bac86f57f
-
SHA256
9b812b4cae7bf46f35fca323523d9c009f28a037ca7a8a03c716a5499368bc21
-
SHA512
0028482212450fdff0c2ee7b26e2116ac5070bf265763be090ea4df3cbf123cf9666b2f4d49a814f61f3b6c561df4d92e71ccd6903671e83b552f1b8e727b066
-
SSDEEP
1536:Kd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbH:KdseIOMEZEyFjEOFqTiQmQDHIbH
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Signatures
-
Neconyd family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b812b4cae7bf46f35fca323523d9c009f28a037ca7a8a03c716a5499368bc21N
Files
-
9b812b4cae7bf46f35fca323523d9c009f28a037ca7a8a03c716a5499368bc21N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE