Behavioral task
behavioral1
Sample
NEAS.15d29e252e92009129c4d3152acc2b60.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.15d29e252e92009129c4d3152acc2b60.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.15d29e252e92009129c4d3152acc2b60.exe
-
Size
31KB
-
MD5
15d29e252e92009129c4d3152acc2b60
-
SHA1
c0b749ae3849c4340a0d898c2069233e3f56ebf3
-
SHA256
a65f9e6103adedce173be49ffbb3de03dcc3a0446a8a41057a391c78a8dfce32
-
SHA512
c89848068e06ac18486ff98261a57f27aded9a10f0b403cc6fe079593561ac9a47b62646ba95a6445827655bcae98dfeca51be0b657b86a00d974df83af3c9ad
-
SSDEEP
384:4jTU7wkE5ISykX/XUS6c0T8BSKfQPhzYWYI4p85/8oRtsCAo4ckw4nUPfsmiXU:ioYKS1/US60PQPFAiRAck1nEsmiXU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource NEAS.15d29e252e92009129c4d3152acc2b60.exe unpack001/out.upx
Files
-
NEAS.15d29e252e92009129c4d3152acc2b60.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ