Behavioral task
behavioral1
Sample
NEAS.e7b619b804ca2d04d679806815ecf880.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.e7b619b804ca2d04d679806815ecf880.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.e7b619b804ca2d04d679806815ecf880.exe
-
Size
764KB
-
MD5
e7b619b804ca2d04d679806815ecf880
-
SHA1
14ff51420335dc466cb8ef18f35462952f5b3d28
-
SHA256
5f9ec669752d3313b2d94307d653adee87ae1632ff6e2cddb49b566f95b38f17
-
SHA512
aa03b07b8cde781705b1ce16ff59420d1919fc42ab1fdd192babb8f115440dfd78a7282307691a89da851c0517b68550befbee6125d6a4ac62194db10deba52e
-
SSDEEP
12288:xEQoS+qhK+y5V68e282bcPNwjJ994V75oJSKm+RSlwWpefTC/MxMwMkpmJjcB:xnK76NlPN8J9s5o8KclwM++/MWxkpmGB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e7b619b804ca2d04d679806815ecf880.exe
Files
-
NEAS.e7b619b804ca2d04d679806815ecf880.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sy Size: 512B - Virtual size: 4KB