Behavioral task
behavioral1
Sample
NEAS.4bd95478769963074a4038d57cd57a60.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.4bd95478769963074a4038d57cd57a60.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.4bd95478769963074a4038d57cd57a60.exe
-
Size
1.7MB
-
MD5
4bd95478769963074a4038d57cd57a60
-
SHA1
9ac4ee53155a7ce53aa26d3d4736313e830d40f0
-
SHA256
83cb543f958e9cd1466f16ce839711cff10e69e010733c6ca5ba41a7bef2ef55
-
SHA512
d576a8e06d7cae806213dab98c27be9bde029263c85a0b3593795fc3e16ee9595565bcd9cd49a4e67ae8681b56d44f02962a41bca9b4b81c296c805067b2f2ca
-
SSDEEP
49152:/s6QTC3rEiuM0R+U+0dPYHpnvIQyPeKF/hY:/ZQTdbM0RhyvTjI/hY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.4bd95478769963074a4038d57cd57a60.exe
Files
-
NEAS.4bd95478769963074a4038d57cd57a60.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.btnj Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.s Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gduz Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.e Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fbe Size: 512B - Virtual size: 4KB