Behavioral task
behavioral1
Sample
NEAS.240d0e5c6c5b9d6672e4ceae19744f80.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.240d0e5c6c5b9d6672e4ceae19744f80.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.240d0e5c6c5b9d6672e4ceae19744f80.exe
-
Size
231KB
-
MD5
240d0e5c6c5b9d6672e4ceae19744f80
-
SHA1
0891301af309ce6d8b52057df5dcd5d0ae9d678c
-
SHA256
7e7b573e75fe9c2506c5cecafc0a66e067b6e5387b4f143b2d0209b8d4a6e199
-
SHA512
41e05356ce2f54467f77528e2e61297ce4415e65b293a9a5bce9afc1712c193dd8bccabd20dde2934efa68c2eb679712be918d1fb18d20bc6e82f3df441ea23d
-
SSDEEP
3072:G0PsymB6eYc7D6JzN11sH6MI44BCAiP1HI5QrercoKaM743GQQ0fC:BP+B6eYcyJRq6MIfC/8kJ91F
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.240d0e5c6c5b9d6672e4ceae19744f80.exe
Files
-
NEAS.240d0e5c6c5b9d6672e4ceae19744f80.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE