Behavioral task
behavioral1
Sample
NEAS.3f93fb37befaae70c4d752b23739d790.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.3f93fb37befaae70c4d752b23739d790.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.3f93fb37befaae70c4d752b23739d790.exe
-
Size
155KB
-
MD5
3f93fb37befaae70c4d752b23739d790
-
SHA1
74310abdd22ecf37a912e41289620567511b94e7
-
SHA256
59142351b5bcb8c46d1e55198c224cf4ca89d619da67c59dc25a44d2f2078c35
-
SHA512
1e1d3b9cff2b2667c8763d8aa251d8fde70837afba19075e4029e364dba32e1251dcd21a97dcd6cea52a4ad33f75c8103cae67a40d93508fb5b7b86a23ee6999
-
SSDEEP
3072:0ljbLl/gvQout41Tj4mYWR/RFgUm3xg+krH3O93g3/5Fpqh05fpc:SjluQoSKIo5RFgBoL3O9wBih03c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.3f93fb37befaae70c4d752b23739d790.exe
Files
-
NEAS.3f93fb37befaae70c4d752b23739d790.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.g Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.i Size: 512B - Virtual size: 4KB