Behavioral task
behavioral1
Sample
NEAS.512c7b74dd68d8123598842971aad500.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.512c7b74dd68d8123598842971aad500.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.512c7b74dd68d8123598842971aad500.exe
-
Size
694KB
-
MD5
512c7b74dd68d8123598842971aad500
-
SHA1
8d986b8520560b14387998fe72372d791f697207
-
SHA256
35442f3ed76e1b39fba2ad984e39f58bf28ad768a712fcd268c3d36ade345ee0
-
SHA512
5e97d9ea4cb6d795b97119531e4cc6592b9b8fd895bb408618f00e2d50d48840e12da5db7d7c4667862e4ae821de0199769f8f68379e4547fc50bee9878ce0b7
-
SSDEEP
12288:sPKLXqppHkNaQwdi50DKgq5M/x3hRallD2mzcKrmNNeGVkBjsM:sSLUHkg05AK5u/nEl5pTue1Jr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.512c7b74dd68d8123598842971aad500.exe
Files
-
NEAS.512c7b74dd68d8123598842971aad500.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tn Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f Size: 512B - Virtual size: 4KB