Behavioral task
behavioral1
Sample
NEAS.26e0a4cfb776fc7a98f2292567718dde.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.26e0a4cfb776fc7a98f2292567718dde.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.26e0a4cfb776fc7a98f2292567718dde.exe
-
Size
1.4MB
-
MD5
26e0a4cfb776fc7a98f2292567718dde
-
SHA1
3faebbc5c17720a3a2b386226eec1f1368513bc4
-
SHA256
13d1d6bd9e80310041258e8388755de625aa22835bf8e4f18d2b86db42a77c07
-
SHA512
702c55eb479c3c4f4fccd68d058e011f383ff0f0cbb12f7b13b3d7e3ba3f4d09648c1f2179df71c2f04b4306861fe46d1b844232a57fab0b286e84984db9ad48
-
SSDEEP
24576:lU8k2Lr9ubpVqQGnb/eKS5LEi62bAH78mG1YjDRqFy:+wM63eKS5WEAb8m2YjDYy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.26e0a4cfb776fc7a98f2292567718dde.exe
Files
-
NEAS.26e0a4cfb776fc7a98f2292567718dde.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhw Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE