Behavioral task
behavioral1
Sample
NEAS.a1a0ebfed6dc411afa611bfb3fe97084.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.a1a0ebfed6dc411afa611bfb3fe97084.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.a1a0ebfed6dc411afa611bfb3fe97084.exe
-
Size
1.7MB
-
MD5
a1a0ebfed6dc411afa611bfb3fe97084
-
SHA1
3c9e99ef53b451e2adba0674ec6260de72e10a40
-
SHA256
d53d989e786e75153d9cb7e319768f146c650e1367831ff6237c75ed12bb1d8e
-
SHA512
72bdec7672ba5b76e362bf1af1f44255191ed8c52e821888aaeae3d8d4323437543a6a3fdb7449d32377e454f5b5294abfaf1d453d16bfa7f8a6971b95d76c36
-
SSDEEP
49152:/q6ebwjWmvrhBL7eu+enul5Or1zmHyc1tK9c8m:/qlcjWQfXpul8rF82+d
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.a1a0ebfed6dc411afa611bfb3fe97084.exe
Files
-
NEAS.a1a0ebfed6dc411afa611bfb3fe97084.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhw Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE