NEAS[.]f0ac0e2e166b4a2ce70933320d6c8e30[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f0ac0e2e166b4a2ce70933320d6c8e30.exe
Size

1.9MB
MD5

f0ac0e2e166b4a2ce70933320d6c8e30
SHA1

7902e9c70f65ca44cd992e06dc783c59bb5ae2b3
SHA256

d1628ccb3c71896cf15fbec3aa141b8204a5a36d5cbd705b2c73606723f9f672
SHA512

a4b0c1cb0cd56c1a1be95abb4ad0859e2768c4f3e00088a710d8cb09a9a9b928b8bfc238a0ff138d4b6b94ce183bbca704d6e50801dbd8609b5af04a25c2a95a
SSDEEP

49152:NG2W7TmxjPzLJpwe/1kM8QGOCQwzpGPatBGB:NG2Wmxj7dpw0kMmOuwP5B

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f0ac0e2e166b4a2ce70933320d6c8e30.exe

Files

NEAS.f0ac0e2e166b4a2ce70933320d6c8e30.exe
.exe windows:4 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bvxzt
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.yno
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vzkj
Size: 512B - Virtual size: 4KB

.lygia
Size: 512B - Virtual size: 4KB

.o
Size: 512B - Virtual size: 4KB