Behavioral task
behavioral1
Sample
NEAS.6a33f61790d581b72e72bb59dbe1b800.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.6a33f61790d581b72e72bb59dbe1b800.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.6a33f61790d581b72e72bb59dbe1b800.exe
-
Size
196KB
-
MD5
6a33f61790d581b72e72bb59dbe1b800
-
SHA1
d302e20cefbd143ecfc5a8894c22e1c1a6212e4d
-
SHA256
890e091e7b6712565bd88f9e55da414480de4f71816d5e80db0e182b35899595
-
SHA512
533155aa3c998c6f000225a69e835e4e46bc15917ffd7e62a0c25fdceb811ac45d0e8729cb198c2a4a81e79944678a902ba4b7746ad87ba3efaa22995b016e32
-
SSDEEP
3072:fOGJToutNVxZVX4/awxfodLJUBv9Bsor1rHjhMU9npQQpmuG:fTToSLRARoYlld9n2Qpmx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.6a33f61790d581b72e72bb59dbe1b800.exe
Files
-
NEAS.6a33f61790d581b72e72bb59dbe1b800.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE