Behavioral task
behavioral1
Sample
NEAS.e156126ea9366aacc4742e5ecdfbb790.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.e156126ea9366aacc4742e5ecdfbb790.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.e156126ea9366aacc4742e5ecdfbb790.exe
-
Size
26KB
-
MD5
e156126ea9366aacc4742e5ecdfbb790
-
SHA1
a16840aeac80e9d4720641b3058188dbfc08cd41
-
SHA256
60e0def215f22a5e619c54902961f190615eb877935521bdf49e73ddd490a385
-
SHA512
4bcc0cdcbeb62c8866ecdde7ec2cde7a668b17fcc8fcb38fc98bb467b36601925d607eca214c2e94a4f3a992efb6ef1544f8034e7211a1906c9f7133150cd530
-
SSDEEP
384:MRmwtBxCvlvmBYdvqqxCWb7p9wO4fC+nwf+0I7V08XTlX52xOHTsLzr0ory1:am0CmuqqdR95+w20I/XT2xRLcV1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e156126ea9366aacc4742e5ecdfbb790.exe
Files
-
NEAS.e156126ea9366aacc4742e5ecdfbb790.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE