Behavioral task
behavioral1
Sample
NEAS.ac282cea0c71b7bd442068ec49e40850.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.ac282cea0c71b7bd442068ec49e40850.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.ac282cea0c71b7bd442068ec49e40850.exe
-
Size
1.6MB
-
MD5
ac282cea0c71b7bd442068ec49e40850
-
SHA1
67535faf0b5b9b88a21f21912721a0439c07d7b6
-
SHA256
4bfcedb063af0729ddd1ea2b57abd4c05a95cc99f2cfda00709199d600d36733
-
SHA512
bba61c8122131d334892184b3639f8666e2a5e77101c7fbdea8dce3f52d3c1e109e08b6d7e620b1f9808c69b9070d30e5ee612cb47e38b8e3a144b5699eba299
-
SSDEEP
49152:A5cyYxuuvH65eKHsPaJHT47K0PcfTW5eZsdky2V9eeqFD:RvsuvueKHsioKDb7iky2PYFD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.ac282cea0c71b7bd442068ec49e40850.exe
Files
-
NEAS.ac282cea0c71b7bd442068ec49e40850.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.edlwv Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE