Behavioral task
behavioral1
Sample
NEAS.d4a97f2aa4a79e803ab91b9a7fc84a90.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.d4a97f2aa4a79e803ab91b9a7fc84a90.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.d4a97f2aa4a79e803ab91b9a7fc84a90.exe
-
Size
427KB
-
MD5
d4a97f2aa4a79e803ab91b9a7fc84a90
-
SHA1
9467b5217e370d7cb61e25a725208915098b55f9
-
SHA256
f02b3f763bb6807f37f63bd8e3b430b7550c070861b37dce24aa877fd50bc026
-
SHA512
6e17529456081b9487814bc1facd61ecccec5c92f5c69e9542646b1668ad0a4911cc7a43c40adce382b481c3ee651150ae0ef18b7ed0c748a6862d39c92621e1
-
SSDEEP
6144:ah/p9pNTUTf9TPiDrerl3qipTWIIjL8ve/2Q6c8:aj9pNTUTpPiyJLsjL8veuQ6c8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d4a97f2aa4a79e803ab91b9a7fc84a90.exe
Files
-
NEAS.d4a97f2aa4a79e803ab91b9a7fc84a90.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 336KB - Virtual size: 336KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE