Behavioral task
behavioral1
Sample
NEAS.03fa3ba2cd2cc8b4a6bdb86c1b7bc8d0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.03fa3ba2cd2cc8b4a6bdb86c1b7bc8d0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.03fa3ba2cd2cc8b4a6bdb86c1b7bc8d0.exe
-
Size
326KB
-
MD5
03fa3ba2cd2cc8b4a6bdb86c1b7bc8d0
-
SHA1
7fc35a4ad632bb52c3eac063ac70f87a240ce977
-
SHA256
6d7ac2ac5fb38b57c535ead7c7d94c051a5bebe7915cafea69163bff6e9fa6ff
-
SHA512
8edd57bfc65a40fed3963ddb1993911991123531e4a5579768359ecb106cd11b48d9d824b31df0355fdb0887509ac4e9f9bf63d384a34d57cc3f5ab1dee59c4b
-
SSDEEP
3072:Ie2A0wxDqUpM5scww4chO+O1BmP5DG0sg3i4XZ9WvDZHwdRX/L+gP38XV:IsxD5cwohO+O1sVG0/pZ6iPC8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.03fa3ba2cd2cc8b4a6bdb86c1b7bc8d0.exe
Files
-
NEAS.03fa3ba2cd2cc8b4a6bdb86c1b7bc8d0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE