Behavioral task
behavioral1
Sample
NEAS.feb7d40331ef6099194fc7efac6acb80.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.feb7d40331ef6099194fc7efac6acb80.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.feb7d40331ef6099194fc7efac6acb80.exe
-
Size
268KB
-
MD5
feb7d40331ef6099194fc7efac6acb80
-
SHA1
2818fd286b3eac14c6fae89fd18853a3fb018e18
-
SHA256
b526bd5e16b96203feea17b0c53245441eac59e2e519cd35701e6885cec5f6a1
-
SHA512
3dabb5e0eede69c09d7565407dbeea1267b041fdf3ebff7982033842e334eadb1c8d379bd6c0fa81da454939e0baefee686a9e3995355175ef9efd6a5adc6a29
-
SSDEEP
6144:mJzCsX/4vxnuoRPbFSDHbfFIAeaNdevMVKdUHA+c0cnEP:mJzCaAfRTA/i9aNdEMYdUg+cjEP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.feb7d40331ef6099194fc7efac6acb80.exe
Files
-
NEAS.feb7d40331ef6099194fc7efac6acb80.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 218KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE