Behavioral task
behavioral1
Sample
NEAS.99d1cbf104d0fa3224467ff039809c80.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.99d1cbf104d0fa3224467ff039809c80.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.99d1cbf104d0fa3224467ff039809c80.exe
-
Size
406KB
-
MD5
99d1cbf104d0fa3224467ff039809c80
-
SHA1
b7556c2632dee47a9485f7936d74ee5ebef3f455
-
SHA256
40a1f087c8d8e0c201ae50ee9dd50725f0f5f23cdf6f0c5ee150a008f647f0b8
-
SHA512
e66cae2fb35d4094eb5139daa34a82610ee432f045a84a8bda727c8fbf7a704e8aaac42010ed4d59440ce8b929e66b20d7777c87a649f900d9c78d4bba698080
-
SSDEEP
6144:0bF3pSwxraz8fGxQGMvTrPE3TTs9meCF9XolN:0B3/xrazyGgbribPXolN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.99d1cbf104d0fa3224467ff039809c80.exe
Files
-
NEAS.99d1cbf104d0fa3224467ff039809c80.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 186KB - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 159KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE