Behavioral task
behavioral1
Sample
NEAS.fb325927742822f092a5726cb5e76160.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.fb325927742822f092a5726cb5e76160.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.fb325927742822f092a5726cb5e76160.exe
-
Size
503KB
-
MD5
fb325927742822f092a5726cb5e76160
-
SHA1
b754a21adc1f2438d329113cad2439a0c713adc6
-
SHA256
d75f5f119ed33b9db73004669306d30b811933633653db7b0c90878f33f562ed
-
SHA512
644bbb034dcfa452535728f9a4a63c88cf82c203fb5d4e06d7b76f35fe33f8901439e8f3f70bf5ba2f84043bad3812279f9a71e513c249778421c8696bcb55d0
-
SSDEEP
12288:GaG6MZq9MN/Qtm4u9+5JrR5fXplWimY7rud:HMZPQtm4uKrVma
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.fb325927742822f092a5726cb5e76160.exe
Files
-
NEAS.fb325927742822f092a5726cb5e76160.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 952KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 501KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tqn Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE