Behavioral task
behavioral1
Sample
NEAS.4f2cac26a9cd570a3bb1e82e244c7ec0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.4f2cac26a9cd570a3bb1e82e244c7ec0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.4f2cac26a9cd570a3bb1e82e244c7ec0.exe
-
Size
112KB
-
MD5
4f2cac26a9cd570a3bb1e82e244c7ec0
-
SHA1
0fecd854c8f32adebc90a5dc8942d48112c78d48
-
SHA256
3216ae7b710f8fc6c8b8ccde6210cd9b3d8eb5dc3e113037528a8638681e46cc
-
SHA512
36138f87ae5e057c21b04b4e968b5ef475b0ea7b7702ada84ff8939b0a50834e5861396eb71ea7b54d76417fbf7e2ba43c79873e085b790e827446e1ea81e7f1
-
SSDEEP
768:TOSPlBt4vcGTnArp7bC5BGJdcn56W8reUXGj3mgI/GosPkQ/VTQxw6:icWvnA9PGosZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.4f2cac26a9cd570a3bb1e82e244c7ec0.exe
Files
-
NEAS.4f2cac26a9cd570a3bb1e82e244c7ec0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE