Behavioral task
behavioral1
Sample
NEAS.dcba34a93064033acaa9fe91c96c8240.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.dcba34a93064033acaa9fe91c96c8240.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.dcba34a93064033acaa9fe91c96c8240.exe
-
Size
448KB
-
MD5
dcba34a93064033acaa9fe91c96c8240
-
SHA1
f3fbcaa4ea0e8c407f253bcfe0053756e6a4ef23
-
SHA256
40fc447bea1d6c80f38a6e1dd07e9b2409b230ba628fe4121ff6de590d1734be
-
SHA512
5a218dc87f91a25095ab57884e35af04cdf1e4accf1f9ca9d3c8f69f7b54deec8d050e0a584e979b3d6ae444a702dfffd30b7f3dc4c77519e5008224a9181644
-
SSDEEP
6144:02pdqfv2IPOGfXf5ovWvtkUolUwsQGIcD0IcLL0cqF:BcrxfP500KaCL7k
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.dcba34a93064033acaa9fe91c96c8240.exe
Files
-
NEAS.dcba34a93064033acaa9fe91c96c8240.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE