Behavioral task
behavioral1
Sample
NEAS.87e0cbf7581985dd7fd34c6ab28b6180.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.87e0cbf7581985dd7fd34c6ab28b6180.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.87e0cbf7581985dd7fd34c6ab28b6180.exe
-
Size
1.4MB
-
MD5
87e0cbf7581985dd7fd34c6ab28b6180
-
SHA1
08a0e25ba404d4e201e7e88df09f4bc1a11ed4a3
-
SHA256
426be39024122a7f270fdd99cfaa9deb3419210f17cf1291e5f3b05de1d753e2
-
SHA512
41d89b3fc8d57047a0d2ef2c83c30246f98531e39ec2067c8e7f8365d7299a826ca55efdc19482c3c6464bc68722115540d3dce1a879fbf41939a0c3dc13d17b
-
SSDEEP
24576:A8HXM7VYAeRnOiH+R/6iVIgGWks3lrvaLzZEnJifS/sHyrGjp:ASM7VyFONJagG3s3lrvaLdEJOS/sz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.87e0cbf7581985dd7fd34c6ab28b6180.exe
Files
-
NEAS.87e0cbf7581985dd7fd34c6ab28b6180.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.edlwv Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE