Behavioral task
behavioral1
Sample
NEAS.2f85f0da476068afeaa0e71009aea8f0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.2f85f0da476068afeaa0e71009aea8f0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.2f85f0da476068afeaa0e71009aea8f0.exe
-
Size
680KB
-
MD5
2f85f0da476068afeaa0e71009aea8f0
-
SHA1
a021f7e24b8c88514b3427c5e7132cd438a3b8b7
-
SHA256
a27de4e57ff458dd559b03cee781de9b7387cd68b824f326dd2cfb80bc514c2c
-
SHA512
a29a523ef0e8b4051b5cf85553ae4c1c584269dcc5aa68e1b9a3ae482aad02c4b51730f0a3063c5730ef57ad123262490c1cfd99ba164238db492e2f8f9faf34
-
SSDEEP
6144:c08p9uIVlfV3p2QZDyzdYwg92krimolrjzKgga5fD+tKXz7+GdQ6ee+LaP/pn0sR:g9TbflpFNpl76ee+LaP/9ToBKQdI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.2f85f0da476068afeaa0e71009aea8f0.exe
Files
-
NEAS.2f85f0da476068afeaa0e71009aea8f0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 456KB - Virtual size: 456KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 189KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE