NEAS[.]7d5d7f34e4f5f3a59d785a4540149250[.]exe | Triage

Sharing

General

Target

NEAS.7d5d7f34e4f5f3a59d785a4540149250.exe
Size

921KB
MD5

7d5d7f34e4f5f3a59d785a4540149250
SHA1

1671f60e0d4b0f0d55a654df3a64b4b09cf98f8e
SHA256

3d42fa4f10bd5d37c17f30c93b44ab5345cd55f8b513a8d6bf97f65861221305
SHA512

350908dcb56a6fc61b5b96a291e1b88f6d46420963646e343b03ee854164bebaaf4011b49f7a941e332bc23351a7a914bde5abddbdcd8dd0f6195739f9547a5b
SSDEEP

24576:StHHsejxtoX/H8gDjeZXj67gP8tKY1Q+FdAl10EgW:gHsejxmvJGVZ8JNdGOEgW

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7d5d7f34e4f5f3a59d785a4540149250.exe

Files

NEAS.7d5d7f34e4f5f3a59d785a4540149250.exe
.exe windows:4 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.jxmnr
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lpkez
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.g
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.i
Size: 512B - Virtual size: 4KB