NEAS[.]9e75bff7d8e8c804bb4d11822ad494a0[.]exe | Triage

Sharing

General

Target

NEAS.9e75bff7d8e8c804bb4d11822ad494a0.exe
Size

55KB
MD5

9e75bff7d8e8c804bb4d11822ad494a0
SHA1

d0d79f3998453a46b5cffafb700954ed03d66dda
SHA256

a72b84825ecea9237456b17f4e25d3ae4e7f8c6bf10561cc53359a8bd45cb621
SHA512

75ad525c9cf4818b71d5f783acb12131bf0ea1963eada5e75aee28e7a17e2b59e889c22cd7f8592372c396abbe5c0623369856f0c08e9fb35df91d36764ffa39
SSDEEP

768:N+CLZoyIm5mn0000IFL8VlVJovlNHBvBPcFhl1WVe8gId39DUS:N51tI/nIFLcJonhpPcjieby5/

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

NEAS.9e75bff7d8e8c804bb4d11822ad494a0.exe
.exe windows:5 windows x86

Code Sign

4d:0a:65:62:d1:18:4b:77:c0:aa:6f:30:dd:33:96:d7:d8:d7:32:28
Signer

Actual PE Digest

4d:0a:65:62:d1:18:4b:77:c0:aa:6f:30:dd:33:96:d7:d8:d7:32:28

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 14KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE