Behavioral task
behavioral1
Sample
NEAS.09eff1a297330ebf1219363dd20d5fc0.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.09eff1a297330ebf1219363dd20d5fc0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.09eff1a297330ebf1219363dd20d5fc0.exe
-
Size
29KB
-
MD5
09eff1a297330ebf1219363dd20d5fc0
-
SHA1
8fd1fd9964dfee054d2b773973ac84ccee1f3ee0
-
SHA256
09a4db9f523d925e7cbb0d3bf46fc1f8817e0057bb1c0c9a1b12f425f8ebed7c
-
SHA512
107e4096a525e45d60ca1a5411a4ce563b154c938d007394de1a0547d891fc4674b3b92ba3c4e08a0646a25c94d91481d6705cd5031539d86b6f26a50ec87fa4
-
SSDEEP
768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/7x:AEwVs+0jNDY1qi/q1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.09eff1a297330ebf1219363dd20d5fc0.exe
Files
-
NEAS.09eff1a297330ebf1219363dd20d5fc0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE