Behavioral task
behavioral1
Sample
NEAS.85a9accabca738402017a574b81a1d30.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.85a9accabca738402017a574b81a1d30.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.85a9accabca738402017a574b81a1d30.exe
-
Size
315KB
-
MD5
85a9accabca738402017a574b81a1d30
-
SHA1
c9ed832c9294ca8f5d68c460a2c1c35d755af8e6
-
SHA256
4822fad12063a5efe37d4e4b452266fdfacc4facb692c25d7a1555b82b1de487
-
SHA512
e9455a4fa76d2191667e103733ca00280a968b71fa6487b47cad893b16885b1f1bf62921281e1fac836768ef273f8fe09be6b7db9cd291b429af11662479c241
-
SSDEEP
3072:0EqqmMvpMvpMvpMvpMvpMvpMvhWJnEOYmwJvWD9h+dKw/kHhsM0XEKUwb:0vqhOYKDu0H6MB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.85a9accabca738402017a574b81a1d30.exe
Files
-
NEAS.85a9accabca738402017a574b81a1d30.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE