Behavioral task
behavioral1
Sample
NEAS.6d97a448e0acc62ad9608d889d3c4e10.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.6d97a448e0acc62ad9608d889d3c4e10.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.6d97a448e0acc62ad9608d889d3c4e10.exe
-
Size
45KB
-
MD5
6d97a448e0acc62ad9608d889d3c4e10
-
SHA1
2a9ce01ebff8c00dca0fd7dcb67e5685a6a58f72
-
SHA256
bf8bc2d0b0ab6975e02b5bc6d0ce766e013d269bc698461c7dd68250b8726c7a
-
SHA512
b7c37a7a23e9d200d2a949c327cd6cc4683e516669e0a0b0890325a802474fc1948711aa79c88bab30776a593646895ae534c8b9c7d685817ea9a79d2c2a3143
-
SSDEEP
768:qZMkutig7BdjwqocD/2wOQCwe9IWSfpmt:qZqAg7B5pocD/2wlqTt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.6d97a448e0acc62ad9608d889d3c4e10.exe
Files
-
NEAS.6d97a448e0acc62ad9608d889d3c4e10.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE