Behavioral task
behavioral1
Sample
NEAS.f572aa743f38d8e8dc173e458d64f020.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.f572aa743f38d8e8dc173e458d64f020.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.f572aa743f38d8e8dc173e458d64f020.exe
-
Size
394KB
-
MD5
f572aa743f38d8e8dc173e458d64f020
-
SHA1
27b575fceb386aec39edc2bb794955dd0d5c0cbc
-
SHA256
265c731241a2b40e9cb35ac27f5fbfa572b9177520454f5e565c7de535213df6
-
SHA512
c9bf58238774f73ac355e5b264e1aa080e8593b20d20d2fac03d1e237dea8ef7f77eb0ba279a0e7dd3a624515a075317ab4a1481cb679c77d365c1491b302cd9
-
SSDEEP
6144:kcm4FmowdHoSph3Ymu8wdHoSM05d34iWRbzamH:y4wFHoS3zuxHoSTd34iWRhH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.f572aa743f38d8e8dc173e458d64f020.exe
Files
-
NEAS.f572aa743f38d8e8dc173e458d64f020.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE