Behavioral task
behavioral1
Sample
NEAS.acb76151ecb3286fd088cfa7ed1ffc50.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.acb76151ecb3286fd088cfa7ed1ffc50.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.acb76151ecb3286fd088cfa7ed1ffc50.exe
-
Size
208KB
-
MD5
acb76151ecb3286fd088cfa7ed1ffc50
-
SHA1
3d057c08df7196cb253595ef0eff9e7123aea969
-
SHA256
0f8cf95267a5454dcc5030acc3266453242cea6a72340f11d7d20ac6fead8dd1
-
SHA512
16cfa6a58758e9772dff8edf0465d3129700435d0f684f94cf00f4eceaf95ad7e2de1646c47304f2988e27910225200c780b7a71e95b858fca0919269e31e385
-
SSDEEP
768:itrMVtrM4uimFjj49Nd9ng6PNkyDMQAa+1895t4b9k122ftSJP9rVY3GXf92Ep6W:w2B6Fjjm7Pu189OkMRP9R8GX12jCL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.acb76151ecb3286fd088cfa7ed1ffc50.exe
Files
-
NEAS.acb76151ecb3286fd088cfa7ed1ffc50.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE