Behavioral task
behavioral1
Sample
NEAS.670bea0fbea5f44698e9c4298460c570.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.670bea0fbea5f44698e9c4298460c570.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.670bea0fbea5f44698e9c4298460c570.exe
-
Size
1.1MB
-
MD5
670bea0fbea5f44698e9c4298460c570
-
SHA1
0ae22ff32ff2ea8e0f7d2bbb6a8477591f6e4e3e
-
SHA256
9de76c606e2975392ea6954504e9cd78d2267cb0eb4699c06240aca691f6adae
-
SHA512
575034ed651f3aad77b8c2be3f3125b3b6fb8bcaa805593b12ac5f58af5d7d044fa6604ef9c3b5e8b3e7b1f346e760ec29775b4ee5c5ed9cf65dfa8d231f37a5
-
SSDEEP
24576:NSL0k7/xxAbDyS2VlY6a32kBkE6AT657n+N+XMnP:NQRPVqZBjFTI7n+NKYP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.670bea0fbea5f44698e9c4298460c570.exe
Files
-
NEAS.670bea0fbea5f44698e9c4298460c570.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.lygia Size: 512B - Virtual size: 4KB
.o Size: 512B - Virtual size: 4KB