Behavioral task
behavioral1
Sample
NEAS.9d6a762217dcd66f84f56994ef0595a0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.9d6a762217dcd66f84f56994ef0595a0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.9d6a762217dcd66f84f56994ef0595a0.exe
-
Size
1.6MB
-
MD5
9d6a762217dcd66f84f56994ef0595a0
-
SHA1
c2077c82d20b52fb510252f47fd54ea98b1b06ec
-
SHA256
86ab061d080f52ba8a7d52e1c7b0bbea7557c3f4955f1edf8546e5f5e6dacb22
-
SHA512
0c3f6846bba3ea4ab377f9eabbb0e78288e8f2117e0f8d8bcef935c26e34796438659cf6c8fe1a85f2e9e2cf27cb2f243c6faef26e15528a2b112c1a90a298cf
-
SSDEEP
24576:Yo7YiSHP2huF8l9/cPQUAjTeAZiXP7bD8ZDQlJbVC7TISzx12tCiPf:X7ePsj9LpSzXPLPK3WtCiX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.9d6a762217dcd66f84f56994ef0595a0.exe
Files
-
NEAS.9d6a762217dcd66f84f56994ef0595a0.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ktlju Size: 4KB - Virtual size: 4KB
.wu Size: 512B - Virtual size: 4KB