NEAS[.]2f068d5b30121b6fb94e9d5d497ac2e0[.]exe

General

Target

NEAS.2f068d5b30121b6fb94e9d5d497ac2e0.exe
Size

682KB
MD5

2f068d5b30121b6fb94e9d5d497ac2e0
SHA1

83fac58e1d895b3b21291a836173b4120aeef6cf
SHA256

45bec84a179548b5266a19c0cb4895364d691866d9a532373d6a6aa32e474c19
SHA512

bba93e8df8ca7667c522db9231f66042f465fe557989627f9ee573dd5747d7872278032080bedd6e5abfe032e0b7f30b385a639af19a7487ca0e410523cb88ae
SSDEEP

12288:rh+GEfIrT5xjs9AiTUDQp2zRXamZQtN2A3pfUPyUjnRNhMS6V:rhAIrd+eiI8p2z04Qr2ocPprhMS6

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2f068d5b30121b6fb94e9d5d497ac2e0.exe
unpack001/out.upx

Files

NEAS.2f068d5b30121b6fb94e9d5d497ac2e0.exe
.exe windows:6 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

UPX0
Size: - Virtual size: 2.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 377KB - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 304KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:6 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.textbss
Size: - Virtual size: 640KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 350KB - Virtual size: 350KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msvcjmc
Size: 512B - Virtual size: 362B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 283B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 2.1MB

UPX1 Size: 377KB - Virtual size: 380KB

.rsrc Size: 304KB - Virtual size: 308KB

Headers

DLL Characteristics

File Characteristics

Sections

.textbss Size: - Virtual size: 640KB

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 350KB - Virtual size: 350KB

.data Size: 10KB - Virtual size: 35KB

.pdata Size: 70KB - Virtual size: 69KB

.idata Size: 6KB - Virtual size: 6KB

.msvcjmc Size: 512B - Virtual size: 362B

.00cfg Size: 512B - Virtual size: 283B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 12KB - Virtual size: 11KB

UPX0
Size: - Virtual size: 2.1MB

UPX1
Size: 377KB - Virtual size: 380KB

.rsrc
Size: 304KB - Virtual size: 308KB

.textbss
Size: - Virtual size: 640KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 350KB - Virtual size: 350KB

.data
Size: 10KB - Virtual size: 35KB

.pdata
Size: 70KB - Virtual size: 69KB

.idata
Size: 6KB - Virtual size: 6KB

.msvcjmc
Size: 512B - Virtual size: 362B

.00cfg
Size: 512B - Virtual size: 283B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 12KB - Virtual size: 11KB