Behavioral task
behavioral1
Sample
NEAS.9b2e4f761bea8895d667b9d61cd27740.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.9b2e4f761bea8895d667b9d61cd27740.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.9b2e4f761bea8895d667b9d61cd27740.exe
-
Size
206KB
-
MD5
9b2e4f761bea8895d667b9d61cd27740
-
SHA1
a84371a66e0bb84e5ccba3b9997105c305824225
-
SHA256
aa3400d702eeeec421fb61aa4a0b223e28244a41e1a8e08b88c36dd168af2f15
-
SHA512
2022ac5f3e9869b5278a67127bb7e5176fa209197da5a8de3d3385b36d32e6bacde327e9953fb9bea831c81c8b2beaecf61d2bba5f2d2446b9ebeba8c0516a8d
-
SSDEEP
6144:9H9y4eoyiCzd11YA53/vkNI+uuu7iDgbzzWoOd1ZR:l9eVz5Y6/cNKlD+o61v
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.9b2e4f761bea8895d667b9d61cd27740.exe
Files
-
NEAS.9b2e4f761bea8895d667b9d61cd27740.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 166KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mmym Size: 30B - Virtual size: 30B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ