Behavioral task
behavioral1
Sample
NEAS.e28f01ac9643927c214fb2eec7150320.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.e28f01ac9643927c214fb2eec7150320.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.e28f01ac9643927c214fb2eec7150320.exe
-
Size
198KB
-
MD5
e28f01ac9643927c214fb2eec7150320
-
SHA1
8d319bb34d04073007865e536866c24a165c62a7
-
SHA256
b6b39409918cc6f428ca0ed825cddc996f3c6bbef7a20c04b4a533633742bed1
-
SHA512
ce83182f376f578573475a6989d0f6cb8ad46d052c82174da25348e0295970289207075d7f7c3b029449df5bb9758343433257a94fadb28e4130ecf49a329a3a
-
SSDEEP
1536:TrBz2asrpDgcNch/fhyX9SQvYgzvbSQh/SD2V6W1nouy8A7:TrBz2asrpDgR5yXgazvb/DV6WtoutA7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e28f01ac9643927c214fb2eec7150320.exe
Files
-
NEAS.e28f01ac9643927c214fb2eec7150320.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 432KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 149KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE