Behavioral task
behavioral1
Sample
NEAS.ea2886f9425f1de54f5029d5c5cdf4a0.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.ea2886f9425f1de54f5029d5c5cdf4a0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.ea2886f9425f1de54f5029d5c5cdf4a0.exe
-
Size
2.8MB
-
MD5
ea2886f9425f1de54f5029d5c5cdf4a0
-
SHA1
82e933f37d5a073332b3ba90aca90affda2ec476
-
SHA256
dd5e9668c4a6bd8f7310593380d484b81ddc8f6c33a4576d7bcbb0a47c381d2f
-
SHA512
d1b063aaa4de192e2f474451f7818614598e3801a8c5dfa27179f91049a802814465d3fbf260beaab8209e1a5968c631bbadb52d8751d1a83e09cb662cdcd190
-
SSDEEP
49152:gSrgZkHHGgAExPjwiUajZQswPMFu01hxOqB6UMW6+PXJPYoVqPx2hP:o/lEx1UR5Pf01PNbMWZhgoMPx8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.ea2886f9425f1de54f5029d5c5cdf4a0.exe
Files
-
NEAS.ea2886f9425f1de54f5029d5c5cdf4a0.exe.exe windows:5 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 7.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE