Behavioral task
behavioral1
Sample
NEAS.49d2c59e27970a79e17500405de6c360.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.49d2c59e27970a79e17500405de6c360.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.49d2c59e27970a79e17500405de6c360.exe
-
Size
54KB
-
MD5
49d2c59e27970a79e17500405de6c360
-
SHA1
e4aef4ec109f90d70034c5119140a039bf567684
-
SHA256
f7a5e7c21566e882f274fd913a4f7d5e5f2845737aeb6b3f3b26dabf31ff4c82
-
SHA512
991c1b96cd07fe229cadf6d86f5568b451111b02dc03da9fde36cab929f15699faffcc6e46aeb1345d584bc5d122cf7648df59fb4f83dbf73e2744db179aecd7
-
SSDEEP
384:df+NCcXgee9fVHrBfYwm8rxBiJwWyn4Abzr93bgw65cXFWPLn:dfQjge4VdHm8lB19nxfrhsw65cVgn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.49d2c59e27970a79e17500405de6c360.exe
Files
-
NEAS.49d2c59e27970a79e17500405de6c360.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE