Behavioral task
behavioral1
Sample
NEAS.19dbaff31d912fc41e7fb896d5493200.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.19dbaff31d912fc41e7fb896d5493200.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.19dbaff31d912fc41e7fb896d5493200.exe
-
Size
885KB
-
MD5
19dbaff31d912fc41e7fb896d5493200
-
SHA1
d04b4b742e01d032578a1b9ed2ad2b3852a57392
-
SHA256
f9e16e7f0802e2cc51ab983651f58e3cb3cb37c9c6d4df71aac3acda889fb457
-
SHA512
de1d93e2b580d9b5f01c5f5e6e72d51ef3b4b1bf04b0c0f50bb4f789f0e250bcc65b6b0a64887d50804c88191267641379d2dfccfa07c2b659390c1611af21f1
-
SSDEEP
24576:3au1R6Q9pp5OOXy814bb3HxFgNZfEpQLpNneZyKxSmNJRxYAX3i:p4RxnHi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.19dbaff31d912fc41e7fb896d5493200.exe
Files
-
NEAS.19dbaff31d912fc41e7fb896d5493200.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 532KB - Virtual size: 532KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 118KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE