Behavioral task
behavioral1
Sample
NEAS.1ce9cc4e4274152c19623f1f4cc26570.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.1ce9cc4e4274152c19623f1f4cc26570.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.1ce9cc4e4274152c19623f1f4cc26570.exe
-
Size
1.4MB
-
MD5
1ce9cc4e4274152c19623f1f4cc26570
-
SHA1
a939c7f82a9c1a190cbbd79771968125024885e3
-
SHA256
c53fd6d1c5abf8fa93c7be89ca4e99e522765b9cfce04f8d24d8f37fe6bd4cc5
-
SHA512
005fc431a2647364852102f51e4c1b19ddd72583bc1f2c7cc2fd9d225a983b265c37360e23f5ac7cdea4d5dd23bd8cd37181c4a98fa1d6e71978022e4a168d30
-
SSDEEP
24576:yUR9t+BALcwNY8KGutn9B2KND5DfS49eIy7lZJJU5Tlrr+qvgcshwqO:/Ht+BALxNY8Kb9B2qFfXxWZziIEgzud
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.1ce9cc4e4274152c19623f1f4cc26570.exe
Files
-
NEAS.1ce9cc4e4274152c19623f1f4cc26570.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhw Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE