Behavioral task
behavioral1
Sample
NEAS.c1cfa5686216e35819aa8f2709e60f30.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.c1cfa5686216e35819aa8f2709e60f30.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.c1cfa5686216e35819aa8f2709e60f30.exe
-
Size
696KB
-
MD5
c1cfa5686216e35819aa8f2709e60f30
-
SHA1
37f0d48be3e75fac8a8346ff2c345af8e65f5017
-
SHA256
ae739f17daaeb0a0e38348d340316179bbacf952c9497320057fa021bb1d2864
-
SHA512
ad3d6e8b5190717c50b973d61f3a31ed8f42a5d94eae825c3d286d82f75cff47b0edc7565f1916caaa342106d1e47b9208e557dc2e1b1112cfc5e978d2d1ac2b
-
SSDEEP
12288:sPKLXqN4PSuGcsWK4/SSScDEHLbofk2NMlK3LAcqBK1h1yDVSpnad:sSLu4KG5ZDSbdNlwRB1LyBSpad
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c1cfa5686216e35819aa8f2709e60f30.exe
Files
-
NEAS.c1cfa5686216e35819aa8f2709e60f30.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tn Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f Size: 512B - Virtual size: 4KB