Behavioral task
behavioral1
Sample
NEAS.41dd64886aa3cbdb59f8f3e26e3a3f50.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.41dd64886aa3cbdb59f8f3e26e3a3f50.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.41dd64886aa3cbdb59f8f3e26e3a3f50.exe
-
Size
196KB
-
MD5
41dd64886aa3cbdb59f8f3e26e3a3f50
-
SHA1
b2c6338c7f84b552ce5fa095c308e0d9e57c054a
-
SHA256
7beeb4ddea464e5b75fb377a621c32a7b805a031d21685b122069c8b2c732c8c
-
SHA512
6d8a989748b842847abebe233d17ac70ea145b6619edb5e1a11d92fa6896cb5e1bc0edddf8ee9c406f78419b7c9b58f866ddc9c37d2dc1ed5dec352a0dfeb126
-
SSDEEP
3072:fOGJToutNLxZVX4/awxfodLJUBv9Bsor1rHjhMU9npQQpmuG:fTToSJRARoYlld9n2Qpmx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.41dd64886aa3cbdb59f8f3e26e3a3f50.exe
Files
-
NEAS.41dd64886aa3cbdb59f8f3e26e3a3f50.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE