Behavioral task
behavioral1
Sample
NEAS.36933534962c321c1f7640ee99a7e550.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.36933534962c321c1f7640ee99a7e550.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.36933534962c321c1f7640ee99a7e550.exe
-
Size
68KB
-
MD5
36933534962c321c1f7640ee99a7e550
-
SHA1
3a0c3933ddad13403e0e6a778e4002734fae4de5
-
SHA256
5e604f743f14e0f5a3f2dd4f0222f7ba3bc23bfbe66b0230cbed3e892a3ffe7c
-
SHA512
2ec6fd1f4f0f1a14745b0b73826f2503157e2e8a386a08c4174ec2c5cc2c5e04a19d21a3b4222412feac970611369f26c2ca92eb097b43336f31b741da0408f5
-
SSDEEP
768:pRfAUJmQCcmLCXQq6fsKiJYsIkjJVzqspJIUL6rza6UEkaLddOJw/:pKUNHFKQbIkHfJp6PJdOJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.36933534962c321c1f7640ee99a7e550.exe
Files
-
NEAS.36933534962c321c1f7640ee99a7e550.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 265B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE