Behavioral task
behavioral1
Sample
NEAS.76dbbd9ec583fada8b548b4368275890.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.76dbbd9ec583fada8b548b4368275890.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.76dbbd9ec583fada8b548b4368275890.exe
-
Size
779KB
-
MD5
76dbbd9ec583fada8b548b4368275890
-
SHA1
97f64b3e52d764d168d28ec3bb2523a7ca9b142d
-
SHA256
e6a7e57d5bde14f177555f4c652b3b4dcbe6ed1a9f310d5bda241f1f52d19521
-
SHA512
5830a45687872c074327699cb480677d5481c5c1e67b5a52348360182302b8b0fecc2657da847edb254ed18168e5bb539f157a79289acb2b434a3e9fe310ec7e
-
SSDEEP
12288:lXpqht/47p8yq0Re+AOgq6JAvdEMx5QUnnOvMTAwMY4CPx7uUZtbX/S29u6ZY3:lUt/49e1Onxzx12M0wbz7zCj6ZY3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.76dbbd9ec583fada8b548b4368275890.exe
Files
-
NEAS.76dbbd9ec583fada8b548b4368275890.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhw Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE