NEAS[.]c8a223d92ab6b071557eda485be85880[.]exe | Triage

Sharing

General

Target

NEAS.c8a223d92ab6b071557eda485be85880.exe
Size

34KB
MD5

c8a223d92ab6b071557eda485be85880
SHA1

80657cfaad1018b982afcf7c86e30afcbd3f0f49
SHA256

6876997c2a0abf586a1b6aa492a5f8e74dbe65769f4557cb0017076e002d7f9a
SHA512

c2d81108fa830e2f24ce35accd530398b9f146c9ce9a4db5abf9795cc2cdfd2fe6931514719c564895ba550021d6d3d7b0fbd2cfb82725b96c7d2483dc93c59f
SSDEEP

768:pwy7luXqnKZ3URe/cqhVnjBsuC1bfeFb1RbfrFFbU:aypnKZ3Ulchtsl1bfw/frFJU

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c8a223d92ab6b071557eda485be85880.exe

Files

NEAS.c8a223d92ab6b071557eda485be85880.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE