Behavioral task
behavioral1
Sample
NEAS.c94b23ffa4a2e3bbbd6921e39213e030.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.c94b23ffa4a2e3bbbd6921e39213e030.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.c94b23ffa4a2e3bbbd6921e39213e030.exe
-
Size
275KB
-
MD5
c94b23ffa4a2e3bbbd6921e39213e030
-
SHA1
ef2dcaadf8f3517879cbf105bf16853347e15556
-
SHA256
cf6c26f3d48b805152a93d2df5412fbab5d3440d8ccf3e7e134c905b361c6597
-
SHA512
c756da2cb2fbcc31edd4ada31d6610c86a3f46853f41f8d5b5dfc0647558e77c2954b6dc54cd4aea959b45c02bb58da4d553d74a9cbd240cf624fca2f3f3cb58
-
SSDEEP
1536:Wrqq+AxVVCXgO8YWuv4P2e58d24g47zopF0:8RvCX78v6YD6Ngb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c94b23ffa4a2e3bbbd6921e39213e030.exe
Files
-
NEAS.c94b23ffa4a2e3bbbd6921e39213e030.exe.exe windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE