NEAS[.]bcd6acade3733793ac80139902100ec0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.bcd6acade3733793ac80139902100ec0.exe
Size

264KB
MD5

bcd6acade3733793ac80139902100ec0
SHA1

a037d50acef53e2c9b1164831d31d6b37c7ddd2c
SHA256

6f48a07630388d864a11bffeea71ae41c8e0aece66fb6d183d182be88ab1e1f3
SHA512

c4ece1d4eafc16c22379d8cf3218abca9e18a87fcdec56ae455bd2bf9b7f08011e1031d9f97052a53d02c944d03bbe66f27f9d43f756d5a8080ddb3290f381f5
SSDEEP

3072:nUJ8m91SiqdvT/GcYvJR8LeBdVw9+TpFLrD+u3nwX:DSYdbGcGjVa8z7

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.bcd6acade3733793ac80139902100ec0.exe

Files

NEAS.bcd6acade3733793ac80139902100ec0.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: 117KB - Virtual size: 144KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 43KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 58KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE