Behavioral task
behavioral1
Sample
NEAS.e3ea7bae1346d248f2db7cc9e7f8bd30.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.e3ea7bae1346d248f2db7cc9e7f8bd30.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.e3ea7bae1346d248f2db7cc9e7f8bd30.exe
-
Size
358KB
-
MD5
e3ea7bae1346d248f2db7cc9e7f8bd30
-
SHA1
cf7278c3fcc068dd22e6f1db207602d8a5b81945
-
SHA256
454c605ede8e21d460d0cf3f9aab465494a060ee3f814ae85c669d206bdd812b
-
SHA512
6215227ae4ad99910bd15db98fcfaf1b50fdb011bd75de054c0c89d9618bc2e1006e3a409d756123c25d87957a075c7401beeec86186e134e8711053eec17157
-
SSDEEP
6144:CjluQoSIIo5RX6DhkufS+OtmMpe1z/xPpzR6oc4CWZQBTg3k96dQWCSh4i4g:CEQoSsbmhkuKtmMiVs453k96mT0P
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e3ea7bae1346d248f2db7cc9e7f8bd30.exe
Files
-
NEAS.e3ea7bae1346d248f2db7cc9e7f8bd30.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.g Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.d Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE