NEAS[.]3e013b388896aa7de432ad9dc7881210[.]exe

General

Target

NEAS.3e013b388896aa7de432ad9dc7881210.exe
Size

689KB
MD5

3e013b388896aa7de432ad9dc7881210
SHA1

70bb5113e7e083b98d47033a0f7f5399ccc8eb33
SHA256

3bd4e92fb2a5548a99d9eae3033c3bfdbfc2a26c2a82d61a99e7aea7c4de631e
SHA512

f821d8729a105d37dac1d05ae3c3f33c9093483e8ea1ed13073212891f8930553a91d1e9309cb4acbfd30c70c55844a3ee1eba81d71fefe3d5d9ef1fc38b96e2
SSDEEP

12288:UOkmbf8szbvu3zTf8RFpgNURONk7bQbFm0OPTbHiItiUC/KOvzxn8b3bA2ejVDaZ:UOj4szbvgvfiFpg+RONkobFD+HZtiOOi

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3e013b388896aa7de432ad9dc7881210.exe
unpack001/out.upx

Files

NEAS.3e013b388896aa7de432ad9dc7881210.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 300KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 630KB - Virtual size: 632KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 720KB - Virtual size: 719KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 300KB

UPX1 Size: 630KB - Virtual size: 632KB

.rsrc Size: 59KB - Virtual size: 60KB

Headers

File Characteristics

Sections

.text Size: 28KB - Virtual size: 27KB

.data Size: 1KB - Virtual size: 1KB

.rdata Size: 720KB - Virtual size: 719KB

.bss Size: - Virtual size: 6KB

.CRT Size: 512B - Virtual size: 512B

.rsrc Size: 156KB - Virtual size: 156KB

UPX0
Size: - Virtual size: 300KB

UPX1
Size: 630KB - Virtual size: 632KB

.rsrc
Size: 59KB - Virtual size: 60KB

.text
Size: 28KB - Virtual size: 27KB

.data
Size: 1KB - Virtual size: 1KB

.rdata
Size: 720KB - Virtual size: 719KB

.bss
Size: - Virtual size: 6KB

.CRT
Size: 512B - Virtual size: 512B

.rsrc
Size: 156KB - Virtual size: 156KB