NEAS[.]68703479c2f55da00472745e783bd070[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.68703479c2f55da00472745e783bd070.exe
Size

1.7MB
MD5

68703479c2f55da00472745e783bd070
SHA1

8adbd823b301a33ee4f2a61d28f7824cb62f6bfd
SHA256

0d28c6fff4d03d2b39d2169abf225ebc2f736e107196fa9ea2a0f103f68f86b0
SHA512

6c7a3758fd45abf9e0b39c39fe4835c8b0f3b1eb3f13f58cd3bef8b0fe9968b6ef3128a2c93dabb28bf5e850b313800f1c3dcc3ce9385c3894ca34083c89e873
SSDEEP

49152:9Nsu7ZDp2/J8mu6pNGKoEk3ANkTTlUk0R+y:HDp2/Jrp03AM5

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.68703479c2f55da00472745e783bd070.exe

Files

NEAS.68703479c2f55da00472745e783bd070.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 656KB - Virtual size: 656KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 49KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE