Behavioral task
behavioral1
Sample
NEAS.27af614ced8b193a5c1e5615251c7130.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.27af614ced8b193a5c1e5615251c7130.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.27af614ced8b193a5c1e5615251c7130.exe
-
Size
34KB
-
MD5
27af614ced8b193a5c1e5615251c7130
-
SHA1
ffeb5894785247da673b45d4b200705fab8449df
-
SHA256
e45ee9153783f3a2f1c74a2fee3d74e111137012dc15117521c5b5894dd8429d
-
SHA512
c67e8e93ad8f6278822cd2f888f7b5b7b538e947a523b3e38e376b682b8590921359ec2bb22cab10040123c4abe9baff28552381b5301a16b7d7e97b4017a0a3
-
SSDEEP
768:pwy7luXqnKZ3URe/cqhVnjBsuC1bfeFb1RbfrFF8GN:aypnKZ3Ulchtsl1bfw/frFiGN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.27af614ced8b193a5c1e5615251c7130.exe
Files
-
NEAS.27af614ced8b193a5c1e5615251c7130.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE