Behavioral task
behavioral1
Sample
NEAS.4d5f00c36391b5364df8cf3cfff91cb0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.4d5f00c36391b5364df8cf3cfff91cb0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.4d5f00c36391b5364df8cf3cfff91cb0.exe
-
Size
1.2MB
-
MD5
4d5f00c36391b5364df8cf3cfff91cb0
-
SHA1
0ad5128018cee4e1943b1b980c9ec697391f9498
-
SHA256
7a2712ed91a629dbd8ff14408cea5ad47b4ae93f0fa11465e8bcfa82838d38cf
-
SHA512
d9a5701d28ba8546cd7fb1321c97f7fe0297ee93282cda33d5c0528b1c8ae36baa8915dbd4a775fc1f0ab70bc62aa5a6fecdc9d24a012084d9a2ea74dbcba7d6
-
SSDEEP
24576:sSLnfYSHcMzoPhD5xDkFeEJlTfcWirsqbWxkLVFEq7Hbdtl68uvLVyYe/ZV:sfS8rDn9ulTEWTKL3yLQB/ZV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.4d5f00c36391b5364df8cf3cfff91cb0.exe
Files
-
NEAS.4d5f00c36391b5364df8cf3cfff91cb0.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tn Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f Size: 512B - Virtual size: 4KB