Behavioral task
behavioral1
Sample
NEAS.a36664b2a9ce134fc492bc04a9141db0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.a36664b2a9ce134fc492bc04a9141db0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.a36664b2a9ce134fc492bc04a9141db0.exe
-
Size
774KB
-
MD5
a36664b2a9ce134fc492bc04a9141db0
-
SHA1
dba4faa012f1e7a5ec9223e3b93bedadd6827d5f
-
SHA256
79c4b4520d52fcd8252abf6abf582461049baebe74480fb08b4f48ba8c13a0c8
-
SHA512
e1af4b7cfc9a849f7713360312b2a056d925dd9b494f85ea54412cbbe24f827a000d833332b881f36ca7a5d6a0ecb5f3469e3e9b3a4e9543a6b2d246d208f4ec
-
SSDEEP
24576:sSLK/eoYP9ZBij5zZpQ9j5RLkyJXM++6Si5QoBt:sDmo69ZBY1+WyL+BwQoBt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.a36664b2a9ce134fc492bc04a9141db0.exe
Files
-
NEAS.a36664b2a9ce134fc492bc04a9141db0.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tn Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f Size: 512B - Virtual size: 4KB