Behavioral task
behavioral1
Sample
NEAS.d1d483930f9043c680cf85f2e09ebab0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.d1d483930f9043c680cf85f2e09ebab0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.d1d483930f9043c680cf85f2e09ebab0.exe
-
Size
1.1MB
-
MD5
d1d483930f9043c680cf85f2e09ebab0
-
SHA1
385e4d78fdeb92166ec053a2ed39c96654409531
-
SHA256
722b983ea7f34d707f39b06d7880138cc8bc0bc1f360803bdea34273c7ac05dd
-
SHA512
77b3e61b7bd37793cd90c494beb34b6ccb797e31372a7daecf9192d23e1b9a81bb40ff399007f3eda697ba427a862e0b5dc150fcad03ca92e674e37e124cc2bf
-
SSDEEP
24576:sSLyho43z+uuWANDE0PC+ucNvuULIIze3xs83Pl76eLXfdy:sPa4j+ugQ0PC+uccULIn5dQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d1d483930f9043c680cf85f2e09ebab0.exe
Files
-
NEAS.d1d483930f9043c680cf85f2e09ebab0.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tn Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f Size: 512B - Virtual size: 4KB