Behavioral task
behavioral1
Sample
NEAS.d8ef78b0bba5797f41923889c14de5d0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.d8ef78b0bba5797f41923889c14de5d0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.d8ef78b0bba5797f41923889c14de5d0.exe
-
Size
422KB
-
MD5
d8ef78b0bba5797f41923889c14de5d0
-
SHA1
e28cc4bc93e5844dd53ea80ad7b84e93c278149f
-
SHA256
7764623d5e6420a95379c8a9e00fec92ec47e4e65add4a5e68fdaf81d8f5d99c
-
SHA512
54e4c11b7720d138816868b46d51db910a107d469a6519d9c1ec1e3e7ad1a65ed272c7de6faa638de5e06b442de5b37545b8c2a70e66da6456fc8eccf688838c
-
SSDEEP
12288:JEyDMhqhXjFDRp+eazSrkaYrtB1F0ROoxTc8ba4ZC+VU:JBTFDba2r89yphba4A+m
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d8ef78b0bba5797f41923889c14de5d0.exe
Files
-
NEAS.d8ef78b0bba5797f41923889c14de5d0.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_BIND
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.btnj Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.s Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.t Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE