Behavioral task
behavioral1
Sample
cd9cf703a85203174085df18bdebffb31c34f43430a529d0f1e8ecee1d667df7.exe
Resource
win7-20240903-en
General
-
Target
cd9cf703a85203174085df18bdebffb31c34f43430a529d0f1e8ecee1d667df7.exe
-
Size
71KB
-
MD5
104baa331a54a4cbb1a63f148fe1d027
-
SHA1
d878c66498e2714e53f81eab13537fc1d4e2bc3d
-
SHA256
cd9cf703a85203174085df18bdebffb31c34f43430a529d0f1e8ecee1d667df7
-
SHA512
29f0aa29ce067e854c1d9f0b4b29014f886a2dac8e4b5843f66e44a02fcdff256f638c956ca1e2e4ad939b0fe781c73c1899a2148b27e43987f4b8871b067a16
-
SSDEEP
1536:xd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbHv:BdseIOMEZEyFjEOFqTiQmQDHIbHv
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Signatures
-
Neconyd family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd9cf703a85203174085df18bdebffb31c34f43430a529d0f1e8ecee1d667df7.exe
Files
-
cd9cf703a85203174085df18bdebffb31c34f43430a529d0f1e8ecee1d667df7.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE