Behavioral task
behavioral1
Sample
NEAS.7e335a44037cfe13c5c4b30ce81555b0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.7e335a44037cfe13c5c4b30ce81555b0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.7e335a44037cfe13c5c4b30ce81555b0.exe
-
Size
1.4MB
-
MD5
7e335a44037cfe13c5c4b30ce81555b0
-
SHA1
03e797b9ed142a669f38845dc0c7f20aaf5b03e3
-
SHA256
382f8e7de581459cd2b48a92bc3a18a2cce07e65cb6b2ce44010fa1f05e8b576
-
SHA512
ab5b2f3f09aa34a3d7925f12d2eb3d6c082ad6c162049d4adbf1ad88895f16338947384df01bab673f86ac925fa157f657bc44c768c9cfe82b840e9340942fa2
-
SSDEEP
24576:NSLawulgSQCP7PBZI8oSo5vuXq0V3njdD4SA3wPRu6Yde4DsgKHKfR7Xd:Nfwu1nPrB1oSo5v501iSA3iQhe7gKHKr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.7e335a44037cfe13c5c4b30ce81555b0.exe
Files
-
NEAS.7e335a44037cfe13c5c4b30ce81555b0.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.lygia Size: 512B - Virtual size: 4KB
.o Size: 512B - Virtual size: 4KB