NEAS[.]e568b51bf0b5ee235f23775d739e76d0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e568b51bf0b5ee235f23775d739e76d0.exe
Size

34KB
MD5

e568b51bf0b5ee235f23775d739e76d0
SHA1

95df62af3bacdc1b478b4afe703b672152f84e6d
SHA256

7791db1efa78d43cd586a9153e9367ce68f0cb63ba4310d172b0f14983e2d72d
SHA512

a9f0b3e4a4641fbfb385c33f4d753eaa8de7784544a51da0d36db7a09890ee04faabdf67b839c3a0b05224a9f307937839b83520bf0fb74c027f9f71a4e8e6ac
SSDEEP

768:pwy7luXqnKZ3URe/cqhVnjBsuC1bfeFb1RbfrFF7d:aypnKZ3Ulchtsl1bfw/frFBd

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e568b51bf0b5ee235f23775d739e76d0.exe

Files

NEAS.e568b51bf0b5ee235f23775d739e76d0.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE