Behavioral task
behavioral1
Sample
NEAS.48b75f635e509ec85bd56b72c6956f90.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.48b75f635e509ec85bd56b72c6956f90.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.48b75f635e509ec85bd56b72c6956f90.exe
-
Size
839KB
-
MD5
48b75f635e509ec85bd56b72c6956f90
-
SHA1
877cbfed55705e7a1d3fa8d55095ee404af796db
-
SHA256
25676733d44aeb5655b75e3d4cdd9042fb6ffd96d63a18fd0d9d7b47bef5ac1f
-
SHA512
6fb5883a1f0ddcca646ed43ea63195728244c4d088bae7ffc2e8ce69c3fbef25c66c8a496ce18d7a6cec0388f7e7b3805baeeb7a8a1043638b740a7aaf1392a8
-
SSDEEP
24576:t21OT3kEPgvH4mqg1jJVUnUHadvviSMJXW4:QsrPA731jOP58JXd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.48b75f635e509ec85bd56b72c6956f90.exe
Files
-
NEAS.48b75f635e509ec85bd56b72c6956f90.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.btnj Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.t Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE