Behavioral task
behavioral1
Sample
NEAS.ad601212832a55ba9dc8c6c774be3af0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.ad601212832a55ba9dc8c6c774be3af0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.ad601212832a55ba9dc8c6c774be3af0.exe
-
Size
323KB
-
MD5
ad601212832a55ba9dc8c6c774be3af0
-
SHA1
2717c60c9667caf743072c931bf085283d2c7cae
-
SHA256
ad4d8feb3af1b9e01c3f8f7e76e61ee6e575d8b7818e1b813d52558347b5835d
-
SHA512
66e71078c5b70da6734094f1ea4676fcc8afbbe56323cef6bef2f02e46f8474209956d5b73a3d7baad56ad2fecb9ecdf043ee21fc9311c8c399e3b66264a91b7
-
SSDEEP
6144:uuq1yy/pjnkeQ4m13YSfZkgthssUgfnnvkkxi+VHvCow:y1yc9kbJ3YykgtGLunvk2FvFw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.ad601212832a55ba9dc8c6c774be3af0.exe
Files
-
NEAS.ad601212832a55ba9dc8c6c774be3af0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 53KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE