Behavioral task
behavioral1
Sample
NEAS.caac3faa92bd34cbba94b43f6d4c9bc0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.caac3faa92bd34cbba94b43f6d4c9bc0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.caac3faa92bd34cbba94b43f6d4c9bc0.exe
-
Size
291KB
-
MD5
caac3faa92bd34cbba94b43f6d4c9bc0
-
SHA1
e6ce8b60e0cdfecd88d4a376974b21ed950a4718
-
SHA256
9ca818c9a0675c24bc6add4bcbdb58d26882a133bbbf50cb5c27fa57fea32b2d
-
SHA512
bca0bad188962eca75655dac804b1397d80d24c90942e866892a71d6b76df704aa42dfd27f602ad4674a321c3db5216f4a7b874c0ec8e937cc915a50656ada4f
-
SSDEEP
384:F9XxPxGsGCDWl/sAqOxkb9uSyVTPaNJawcudoD7UbZNOgNOXNOJ+NO+NOWNO+ZNx:FFxPxECixrnxkxQ+nbcuyD7U9mNGK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.caac3faa92bd34cbba94b43f6d4c9bc0.exe
Files
-
NEAS.caac3faa92bd34cbba94b43f6d4c9bc0.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 276KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE