Behavioral task
behavioral1
Sample
NEAS.d662d208b61c35684a394e4017a915a0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.d662d208b61c35684a394e4017a915a0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.d662d208b61c35684a394e4017a915a0.exe
-
Size
1.4MB
-
MD5
d662d208b61c35684a394e4017a915a0
-
SHA1
c64fa45653a06c20c5f1d5a107d317592aebfaa9
-
SHA256
9c62fd0d8c25bc795a44532c4f0666c7e902b92008bf6c8cbef7fb540fc50fad
-
SHA512
92627c10337cb98859494fb3a13b1f806f8f447d91b5c87997330bca2356fe02307d284035595e80dfe3120755bf3bcb66aca11e8788bcc46923524a5825046f
-
SSDEEP
24576:sSLgIQvKhv/x0aZXWPQGCDS6V12lgDoap4ZQocSKLe+u7QI745aEZe:svvania1WIGwxVElgtp4ZzuLNKQI745q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d662d208b61c35684a394e4017a915a0.exe
Files
-
NEAS.d662d208b61c35684a394e4017a915a0.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tn Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f Size: 512B - Virtual size: 4KB