Behavioral task
behavioral1
Sample
NEAS.a364f4e04cbcf456fdabef3cbcf12a90.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.a364f4e04cbcf456fdabef3cbcf12a90.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.a364f4e04cbcf456fdabef3cbcf12a90.exe
-
Size
1.5MB
-
MD5
a364f4e04cbcf456fdabef3cbcf12a90
-
SHA1
84da1c01dba2d0aaf8a2d20add7bf4cfde25a10c
-
SHA256
2a97a10cab53b6949ef0fc800ec52349978edbb619f1567050553843116e13d0
-
SHA512
9dd715f625969e33f05d1f6397593af716dbce08a72405128bc93438a2ec366a75f75ac017f6b7f2bdc7d683811cded571030ed69909ddfec179a2cb5e3e0e7c
-
SSDEEP
24576:lUkbyFI+v6XRJUZ2AeCLnh/fUv2FBSsBhOkJGwpUbwSCh6xJQiZHf/J3isAOiN:++57haZ2AeEh/cv2FYwBKbiIJ3i+2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.a364f4e04cbcf456fdabef3cbcf12a90.exe
Files
-
NEAS.a364f4e04cbcf456fdabef3cbcf12a90.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhw Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE