Behavioral task
behavioral1
Sample
NEAS.3fbde2e4eff0f374d352da773498de8f.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.3fbde2e4eff0f374d352da773498de8f.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.3fbde2e4eff0f374d352da773498de8f.exe
-
Size
782KB
-
MD5
3fbde2e4eff0f374d352da773498de8f
-
SHA1
dc8f4bda9b6c8a6701370c98671fb9b590be79eb
-
SHA256
2ba69c3ba3eb4b2d016f337561ce5c682aca0942bb020b28ab74df8becdc5655
-
SHA512
cc7509f880a0563e74ced6fe930c73ee2a59b1aa2a5826a05b89df3c0b3f524f9d6a51909d3ffc55a7dca20d15fba8536e68e4b80c28874f6411cf3099a2d97a
-
SSDEEP
12288:A8EQoSMgdRGyrKGAIrq3+ds8yInIDrgoWiYs0HeCOQB9qH3i4zlmyonys1pkz:A89dMymGAIHyInkkriY3dBj8foNP/Y
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.3fbde2e4eff0f374d352da773498de8f.exe
Files
-
NEAS.3fbde2e4eff0f374d352da773498de8f.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.edlwv Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE