Behavioral task
behavioral1
Sample
NEAS.c8f69e67c0aaee050e601733019d5f40.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.c8f69e67c0aaee050e601733019d5f40.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.c8f69e67c0aaee050e601733019d5f40.exe
-
Size
446KB
-
MD5
c8f69e67c0aaee050e601733019d5f40
-
SHA1
b356a82e95d80aebb664525c762c7d7a383a9390
-
SHA256
e3bfcce23e2c1ff9f6a0f617ecd331e17e95d66cebeba3c92b265e96d1499ab1
-
SHA512
3b71ac4cc0f9fead6f1137cd1ce404664b4121bc52108822b574a2327513c10397ccdd9dad4edf60cfbd2cc03a966438eae560658ef796ae3306e41b55a785dc
-
SSDEEP
6144:0hbZ5hMTNFf8LAurlEzAX7orwfSZ4sXUzQIQf9KezcdwgY:qtXMzqrllX7EwfEIQVL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c8f69e67c0aaee050e601733019d5f40.exe
Files
-
NEAS.c8f69e67c0aaee050e601733019d5f40.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE