Behavioral task
behavioral1
Sample
NEAS.795b3156360a523927885cc3d6e03ad0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.795b3156360a523927885cc3d6e03ad0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.795b3156360a523927885cc3d6e03ad0.exe
-
Size
247KB
-
MD5
795b3156360a523927885cc3d6e03ad0
-
SHA1
9cef9b66117eee201118fd911a040a05f80d622d
-
SHA256
bfbdd32669929209e02de51549578b7f2c631bdf5d6de19ddd4d9bcb2821a8af
-
SHA512
bf4ad66fc0d5acd89dd523715c97a96b94624e254fc082f7fa6eeefa6f8e2bdd669a4fe8ef84ad73ae2b6ff7860ae1a237cdd6a0f178fd62c197e1b371979d8c
-
SSDEEP
6144:OVAqe8A0I6TqaYUkBB+h7MgsUb6C26ibLS8YLIruJ:+zAP7+VbfVliPMLIr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.795b3156360a523927885cc3d6e03ad0.exe
Files
-
NEAS.795b3156360a523927885cc3d6e03ad0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 122KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE