Behavioral task
behavioral1
Sample
NEAS.48e9ecb3c8c97c73f0e768e6baa65db0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.48e9ecb3c8c97c73f0e768e6baa65db0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.48e9ecb3c8c97c73f0e768e6baa65db0.exe
-
Size
221KB
-
MD5
48e9ecb3c8c97c73f0e768e6baa65db0
-
SHA1
53cc849865bd31a4bbe479c00b0a1987f1b180cd
-
SHA256
3d67842992072e2c871288f419b196a18d905c80a7c575efde4486b5ef09ef6c
-
SHA512
c06b60da61e278a82a5a31906d5eda83f20644a9d3e4010704534ea9cdffce28c5c752594d720288df3827c14b9f3cc18292a4c7583912d3c943811f1b98abe4
-
SSDEEP
6144:SDAPT90I265VlXck46DAR41NKsGQ9yMKKtSQjPRX:NTYUlcL6DKQ9IKtLj1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.48e9ecb3c8c97c73f0e768e6baa65db0.exe
Files
-
NEAS.48e9ecb3c8c97c73f0e768e6baa65db0.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 156KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE