Behavioral task
behavioral1
Sample
NEAS.cb4c180c0baeab8c00f857e5ae1faca0.dll
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.cb4c180c0baeab8c00f857e5ae1faca0.dll
Resource
win10v2004-20231023-en
General
-
Target
NEAS.cb4c180c0baeab8c00f857e5ae1faca0.exe
-
Size
313KB
-
MD5
cb4c180c0baeab8c00f857e5ae1faca0
-
SHA1
14f86daed83b1fe9779ea234bb77b2719419dc2d
-
SHA256
7c7658508bab94802b5fe7aa6f1766e3cff79de4803a2fcf055150b2e781bd5e
-
SHA512
32598f54fe0c92d4acb8127a65d04e612df79692729317d24da19d12d46e6f8aacba24e78917ec6041f7504ad183c5f74ac8a1d2574ca5437580834229b7c9c6
-
SSDEEP
1536:i3C8wUcw1dwm8qlwn4iEv72oIY6bGkPwTufpXeTVZR3AWgCuNjC2WImm:o0UXEfhEYbzPCTVZR3AWijGnm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.cb4c180c0baeab8c00f857e5ae1faca0.exe
Files
-
NEAS.cb4c180c0baeab8c00f857e5ae1faca0.exe.dll windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 62KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE