Behavioral task
behavioral1
Sample
NEAS.a298a5a4ac346e05246d20b2767b9020.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.a298a5a4ac346e05246d20b2767b9020.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.a298a5a4ac346e05246d20b2767b9020.exe
-
Size
63KB
-
MD5
a298a5a4ac346e05246d20b2767b9020
-
SHA1
dee5b7a72826b8161673954ba0e27768187cef53
-
SHA256
f4e48b1ff4707e276a5ec12bfbfbd051273e34ff96fa901d2ee0958aea170871
-
SHA512
f857bf9a513512084c19ec197c9d3826ee2f27e8e01417c93b7d7322e6c14101f2fa66b8675a1b07e371c1d8e7171e43200a641d69c7a48a2f53fe78e1e705c0
-
SSDEEP
1536:YtjBmxINweWpdR/e83GuG9XDToG/UIXXY4bi4MtWz:YtKkmdQ82eGMIXoUIWz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.a298a5a4ac346e05246d20b2767b9020.exe
Files
-
NEAS.a298a5a4ac346e05246d20b2767b9020.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE