Behavioral task
behavioral1
Sample
NEAS.ee2d5f0346d4eaad8fea3370c23e82c0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.ee2d5f0346d4eaad8fea3370c23e82c0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.ee2d5f0346d4eaad8fea3370c23e82c0.exe
-
Size
224KB
-
MD5
ee2d5f0346d4eaad8fea3370c23e82c0
-
SHA1
fbbe02864351969e8d7aaa07a72a1d507e1b4692
-
SHA256
cb6d988ba9f006a93a1584c9de8de066fff655b3b8c3a02052e06e2b0c2bc348
-
SHA512
38d99d3ef39afa96bc60adff458c7569040cd20eca7673b0f8383602411fa8566374439960f3708feb537d96af610491c3eea61ae98b7c4baa5aa884329f6750
-
SSDEEP
6144:LTnjnvrDiMNb1LSlZCgb5OQx0MciQGKAanB9RMJGt7l:LHn3dtYb5O0ci1aXRMWl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.ee2d5f0346d4eaad8fea3370c23e82c0.exe
Files
-
NEAS.ee2d5f0346d4eaad8fea3370c23e82c0.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 300KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 187KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE