Behavioral task
behavioral1
Sample
NEAS.cc0f35db7332d4bb28fed11b701aa490.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.cc0f35db7332d4bb28fed11b701aa490.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.cc0f35db7332d4bb28fed11b701aa490.exe
-
Size
41KB
-
MD5
cc0f35db7332d4bb28fed11b701aa490
-
SHA1
bb42ecd9c0d142afa191b03a8c3f0c96bf7caa90
-
SHA256
150066aaa8602397d60ac2b1bef88a87a5eed3501e04ff47e0230a7b7c2311ee
-
SHA512
5cd876e809008e6f0aa891c074677c03ab389c1cb50b801b1f6d9ca3dd941d1e113d9c706d74b75960f9355f4ff5f67626e6a61e1a9598e928d7d44432d01000
-
SSDEEP
768:88MwW5KfV0J3tEBfMUDdwqWJUOU8qSgcu3oW/A8Z9557324nbcuyD7U:qwWK9E3qmY/UfUL1c2/AS579nouy8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.cc0f35db7332d4bb28fed11b701aa490.exe
Files
-
NEAS.cc0f35db7332d4bb28fed11b701aa490.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE