Behavioral task
behavioral1
Sample
NEAS.a661ec277cf2008c106ab84d58d55e50.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.a661ec277cf2008c106ab84d58d55e50.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.a661ec277cf2008c106ab84d58d55e50.exe
-
Size
528KB
-
MD5
a661ec277cf2008c106ab84d58d55e50
-
SHA1
0e100746664662a49b1cd2103ca71dc44aa89166
-
SHA256
8375d1a4c764da03e957200624a2f1d0201ee505504af1619bf4d50778fa0877
-
SHA512
966a87ea8edfa2ce43c3786843834634e0a347a1dc941879026fdddc8434d9be39df1ff9b79e5dd7c757bb4e040188699e080d22ec49df674e6df1d00c5b48cf
-
SSDEEP
12288:uTc3wotgHkmUfVcB7rV48aZsycEVW/Wdw:uTc32EZVcBPVKshES
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.a661ec277cf2008c106ab84d58d55e50.exe
Files
-
NEAS.a661ec277cf2008c106ab84d58d55e50.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE