Behavioral task
behavioral1
Sample
NEAS.468c62a9365a7cde6b886927d6d3dce0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.468c62a9365a7cde6b886927d6d3dce0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.468c62a9365a7cde6b886927d6d3dce0.exe
-
Size
543KB
-
MD5
468c62a9365a7cde6b886927d6d3dce0
-
SHA1
d91888157fc11da43cf5b42deca432c22c393cfb
-
SHA256
32e408ab46a8c40e0d8deefaaf838699cc99a84f861d9557e6bebb4fad94f8d8
-
SHA512
30e45f15e676caba1d0ec8a46c9346dff63633498fcd9c79c8f26d9cf9dfff69a9f18e246533f875d5a06ed9e140f491750cf142a81340c9c57c9dfe1fe23105
-
SSDEEP
6144:zlO70LJFAbdVkT54aXqC0LkodrkRzFv8pIDfwFj1QKkJDUSlw6/lirIa:zlkyIdVkt4aHoizFv8Ob1KMDUkFiX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource NEAS.468c62a9365a7cde6b886927d6d3dce0.exe unpack001/out.upx
Files
-
NEAS.468c62a9365a7cde6b886927d6d3dce0.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 242KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 153KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 807KB - Virtual size: 808KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code Size: 252KB - Virtual size: 252KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE