Behavioral task
behavioral1
Sample
NEAS.a507620356d7b39d2467e4b8fa3dc410.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.a507620356d7b39d2467e4b8fa3dc410.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.a507620356d7b39d2467e4b8fa3dc410.exe
-
Size
159KB
-
MD5
a507620356d7b39d2467e4b8fa3dc410
-
SHA1
aaba42cd2edd00bdcd9c05a8741cc7786914941c
-
SHA256
1b1bbbcf2342198bfeba8ae199e930bf1b19f5d455a1f5f64e5ec3bebee7625e
-
SHA512
5d8c881e9f9e6a53045b8adb3b634497b5c98cf2a6ec89dbd8c39480692d86331a9b5b304b62dfbf35bfbc78d1c66d73d6262bead2c1b6083a1477a5c9e85092
-
SSDEEP
3072:yxTqpdA3f6QNf2IPO4DpmWpAsfYbTOBoefYi6a9k20tAvnkzkuIS:02pdqfv2IPOGfXf5ovWvakK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.a507620356d7b39d2467e4b8fa3dc410.exe
Files
-
NEAS.a507620356d7b39d2467e4b8fa3dc410.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE