Behavioral task
behavioral1
Sample
NEAS.0659bb02b1f13a44ac0422e41fa6b590.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.0659bb02b1f13a44ac0422e41fa6b590.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.0659bb02b1f13a44ac0422e41fa6b590.exe
-
Size
1.6MB
-
MD5
0659bb02b1f13a44ac0422e41fa6b590
-
SHA1
02e66eca784a8dbb15dd0e95678f6661f331486a
-
SHA256
28763fd7911aeb880a9fddf95c9f71040ca35e6c9f11f50000271da2cea38cb1
-
SHA512
bec8d41ddf3b701709af47031102eb81e332cd6326ff34ae853bdff2ffbc3625b604da22cbb81a214bb15248e169bd86f26a66c77145426c50aa4e69fd39d62f
-
SSDEEP
49152:sUi1Vk2Yzg+HXFFNJpkibpXirAn7KfgBlFu1l0:sT+c+HX7NJpyAnOIBv8W
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0659bb02b1f13a44ac0422e41fa6b590.exe
Files
-
NEAS.0659bb02b1f13a44ac0422e41fa6b590.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tn Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f Size: 512B - Virtual size: 4KB