Behavioral task
behavioral1
Sample
NEAS.cc35fa3e6e59acf0091d47a9db9194a0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.cc35fa3e6e59acf0091d47a9db9194a0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.cc35fa3e6e59acf0091d47a9db9194a0.exe
-
Size
136KB
-
MD5
cc35fa3e6e59acf0091d47a9db9194a0
-
SHA1
7c070b9eb20d681565964aa218b9de8611021213
-
SHA256
1dfe21ca6276f897d6d19943ce134d1dc112f393c7fbb9edba829edaa6c73182
-
SHA512
90a22c6bd144a7fed95e4ce07d444741c755186f3afb7afc746c1f83612b095255013c72b2b040ebabce340f35f2961a2cd242fc072723cade2cb5dfe9d522eb
-
SSDEEP
3072:TAxeIXJMPSfQoKT8nWMx6BbdNaL9E6qHpd7BNWBbdr:T0XJgoKT8nWoqGL9EPj7yN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.cc35fa3e6e59acf0091d47a9db9194a0.exe
Files
-
NEAS.cc35fa3e6e59acf0091d47a9db9194a0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE