Behavioral task
behavioral1
Sample
NEAS.dd7dfb0e5496a78256c618567897e810.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.dd7dfb0e5496a78256c618567897e810.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.dd7dfb0e5496a78256c618567897e810.exe
-
Size
884KB
-
MD5
dd7dfb0e5496a78256c618567897e810
-
SHA1
304ae0010b4939c7c25ae330b4dfb07606d0308d
-
SHA256
8769a357256da9299ed66ed3cca17912196fcbf431a46e2849c718a7f65922bc
-
SHA512
72ec048d084a541c58121a30173d68c182f303ed1e548df6c86ec46c6296e880ed4dab7bee6bbfcd15f4a816345265e3aaff29f187b960e2c01b15ae4000ed66
-
SSDEEP
12288:7EQoSaqhOGA5iF8w1/cG0wqPQR1LJM7Wdt/oVRIG8c9cnXM6nSEFxX6RgtsLZVVB:7rBAo6QUhwqMorJ4vQgts9GhCQCv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.dd7dfb0e5496a78256c618567897e810.exe
Files
-
NEAS.dd7dfb0e5496a78256c618567897e810.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.btnj Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.s Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gduz Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.e Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fbe Size: 512B - Virtual size: 4KB