PyInit__multiprocessing
Behavioral task
behavioral1
Sample
NEAS.4649c0fec950ba721a8b5f66d7810cf0.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.4649c0fec950ba721a8b5f66d7810cf0.dll
Resource
win10v2004-20230915-en
General
-
Target
NEAS.4649c0fec950ba721a8b5f66d7810cf0.exe
-
Size
22KB
-
MD5
4649c0fec950ba721a8b5f66d7810cf0
-
SHA1
aab135199714f797c4ba3e4932495ff3ec94cc93
-
SHA256
a12aab23ec5d02dac6c1d7743020b1c436cdf351027a4bbf090fab972bffc5c8
-
SHA512
9f7e4609c8121bed70c0795a75818234a5c5f013708a98b90edf86fb7fab7609a0ee0b604a86c5fb146e7020aa2667b11757465db04c903ef4585dcdf18e0581
-
SSDEEP
384:1ran1uSYldEZsxMKzBZa7gJX0LIIQRBLT9JYIYiSy1pCQ6VMhbU:1rafYlC8NpELIIQRtTjBYiSyvjhbU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.4649c0fec950ba721a8b5f66d7810cf0.exe
Files
-
NEAS.4649c0fec950ba721a8b5f66d7810cf0.exe.dll windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE