General
-
Target
NEAS.789af0b362500da672a4ac10b7812750.exe
-
Size
111KB
-
MD5
789af0b362500da672a4ac10b7812750
-
SHA1
313ef4074c3e81ad7ac48546d65ab2f8f544ce75
-
SHA256
5d127003e0f330a0ab52786aea345c7828e2e53663ad4e9f38e00d378bcb3513
-
SHA512
eb73982641e5a6312a184a551feab59730b0d7d2923ab7d1d61b75c83f93204dffeae2a2ca1e5ce85e29604fed1f976fbba0e201a0eb22c0ef89468e9bf2e059
-
SSDEEP
3072:TROzoTq0+RO7IwnYP6u/MTobwLcuA+FG+A3i2/E5Z3e2jzV:1kdNwB1uYobopFG+A35cvNjz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.789af0b362500da672a4ac10b7812750.exe
Files
-
NEAS.789af0b362500da672a4ac10b7812750.exe.exe windows:10 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE