Behavioral task
behavioral1
Sample
NEAS.da17a58c5392b5753bfa77a80ea57280.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.da17a58c5392b5753bfa77a80ea57280.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.da17a58c5392b5753bfa77a80ea57280.exe
-
Size
863KB
-
MD5
da17a58c5392b5753bfa77a80ea57280
-
SHA1
b51521d89c5203a7ad0f234313c7c6c72317c653
-
SHA256
62e1fb6f6116e8fe4ebd5e09dc9f2b2ab1502057139feb7c624be60cf7dd429a
-
SHA512
7036a9f96fd06829b39a1f0fbc99619f2dd99880d63cdf79591d4c426d66a001bb861d370c356e845d26c7e25604076980ab4c62f321650e927007c38d9e3540
-
SSDEEP
12288:JEyDMhqhQLQ+2x0nodwQHzf0LGuVnNt1r/k0WgUN0sGU6J9RFgMSS82q22YcW4+2:JBv+2uod5f2NNwJ50ponY/4+TlTjs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.da17a58c5392b5753bfa77a80ea57280.exe
Files
-
NEAS.da17a58c5392b5753bfa77a80ea57280.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_BIND
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.btnj Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.s Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.t Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE