Behavioral task
behavioral1
Sample
NEAS.3f31548daf928b55440c7f0ff55f7710.exe
Resource
win7-20231023-en
General
-
Target
NEAS.3f31548daf928b55440c7f0ff55f7710.exe
-
Size
303KB
-
MD5
3f31548daf928b55440c7f0ff55f7710
-
SHA1
d883f51c799dd8172c69d89953fe0efe31d57cc5
-
SHA256
2adb823ad06e4ddeec893d22720908137e890ff84c5b1ce1a0c2c3994a3519bc
-
SHA512
ebee600df5456bba17a38a633272633e2fb8ce95c86b51cfe5297603f425f4c7cbf2f066076830728fb3834dc1556a5984a0e027be852bddcfe786e7528dba66
-
SSDEEP
6144:XbA5WKFLL0L7FizD2+jDLQH5u+0Jrb4jZ634k51tDaJ6kq/:LAPEd1+j25j0JY9634e1tDbf/
Malware Config
Signatures
-
Obfuscated with Agile.Net obfuscator 1 IoCs
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
resource yara_rule sample agile_net -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.3f31548daf928b55440c7f0ff55f7710.exe
Files
-
NEAS.3f31548daf928b55440c7f0ff55f7710.exe.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
4$PqM Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 154KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ