Behavioral task
behavioral1
Sample
NEAS.aa5b386d868197dd46519beaa963b140.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.aa5b386d868197dd46519beaa963b140.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.aa5b386d868197dd46519beaa963b140.exe
-
Size
245KB
-
MD5
aa5b386d868197dd46519beaa963b140
-
SHA1
249e16072e13bc110a5091d72b40f7903f079644
-
SHA256
1afd204e655374ebb9647055c5ae9bc4db2c6d269f3a5bea5e1321ee4f7e7dd8
-
SHA512
6a3992ff1648481b420e36866a493c49815b740dcf1ba7406c658fe7d9e51ba408363c612b56d9c6efeda5f250c07e2ca7d1024973a761d507ad40401793d3a8
-
SSDEEP
6144:ajuJJFXNwu2AFK+uKjhmoSN2uugt7ekHx:aqJJFquPFK+MoSNzugRF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.aa5b386d868197dd46519beaa963b140.exe
Files
-
NEAS.aa5b386d868197dd46519beaa963b140.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 624KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 119KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE