Behavioral task
behavioral1
Sample
NEAS.7e12c404de60a1e084e28f8aa7b3b480.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.7e12c404de60a1e084e28f8aa7b3b480.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.7e12c404de60a1e084e28f8aa7b3b480.exe
-
Size
3.0MB
-
MD5
7e12c404de60a1e084e28f8aa7b3b480
-
SHA1
b83f0ea7bdf66ef2c8a0ada5484b69f8afeddc02
-
SHA256
e8f2f78a611d14c2079b1e2a334b3966012098ee6cb5d35e186ce03677b54e86
-
SHA512
c7136a446f1ea0887c1dffd9ce6058e919a7cdad1c7d6167ddece9d753fa45f0b071f059b03d4489b2489f80e946f7ac686ac3c5f4115fabe947f0d320ad800f
-
SSDEEP
49152:K0QVO4oZt6c4c7YWr/2RW8jhVKyPI9jZO9cXzcTjnt14NJ4TUWV8NXy+5n5:4/oZt6oM62RW8jhQyP2jZKTjnt14NJk0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.7e12c404de60a1e084e28f8aa7b3b480.exe
Files
-
NEAS.7e12c404de60a1e084e28f8aa7b3b480.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 636KB - Virtual size: 636KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 408KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Jiack Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE