Behavioral task
behavioral1
Sample
NEAS.c2317b54fa22a6f4ff1a96e1f1b1f360.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.c2317b54fa22a6f4ff1a96e1f1b1f360.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.c2317b54fa22a6f4ff1a96e1f1b1f360.exe
-
Size
91KB
-
MD5
c2317b54fa22a6f4ff1a96e1f1b1f360
-
SHA1
1bcb381e7326b593bbbf8e464c8a0eef949185b6
-
SHA256
b2ea180f1d3376b42583b0edfeba48cdc65a3c776f623cc4ebc8eb35a0a71753
-
SHA512
48d837cb0aa0675dbc1527b1f0a2dcc0da86dbf2e1f3a5334b438c131ff36bbd311dfc807745a7a3e6ec423ee1a96bffecb7798076d9a7f90d4c9beb312cd0e7
-
SSDEEP
1536:ERsjdf1aM67v32Z9x5nouy8VTpRsjdf1aM67v32Z9x5nouy8VTQ:EOaHv3YpoutNpOaHv3YpoutNQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c2317b54fa22a6f4ff1a96e1f1b1f360.exe
Files
-
NEAS.c2317b54fa22a6f4ff1a96e1f1b1f360.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE