Behavioral task
behavioral1
Sample
NEAS.b966684487751835bd6762df4b808030.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.b966684487751835bd6762df4b808030.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.b966684487751835bd6762df4b808030.exe
-
Size
2.1MB
-
MD5
b966684487751835bd6762df4b808030
-
SHA1
24bdac8718c4a2ffec6b597c14a23c9d1f456a31
-
SHA256
cf147ecf9780e5648a5144a0b736c4b0c368934da05b41292aee90eb23c58f37
-
SHA512
235ce9b53a11684cdaef8270750cecf1c4c29c469cfb1fb884cafea99b01d4a1cabf735e68be3002765813cb1268ee224b06a70f7740820670c5df5ffcb5313c
-
SSDEEP
49152:A2gS/YaS1MFzO/fBv+B47fKL+mkDkpGctPIY0:v1zORvmR3kDkB0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b966684487751835bd6762df4b808030.exe
Files
-
NEAS.b966684487751835bd6762df4b808030.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.edlwv Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE