Behavioral task
behavioral1
Sample
NEAS.0e38149f3528ba57e451f58a63350680.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.0e38149f3528ba57e451f58a63350680.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.0e38149f3528ba57e451f58a63350680.exe
-
Size
278KB
-
MD5
0e38149f3528ba57e451f58a63350680
-
SHA1
8941df9fd53dacd972a78077230e8f151749d5e1
-
SHA256
68129340d789cfd20d4fc5d323efc5955c113b098ddaf5a8afb0a5b3ba180f48
-
SHA512
6d6ddd24d8da76a45b8b55b3526e3b1d3f4c234ff423f8ed9f51aad5f53ed974873e9c28b48295ef95ebc12a33a7e438f055fcd665b4454f8065fa0e6693b665
-
SSDEEP
6144:T3oTJQcLHBUhOKhzW6iJsoePbWKkkjfysl66SbPxdL7UhyAHiMWarJeq4GwYt5av:T3qVLHBUhOKhzW6iJhePbWKkkjfysl6r
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0e38149f3528ba57e451f58a63350680.exe
Files
-
NEAS.0e38149f3528ba57e451f58a63350680.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 115KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE