Behavioral task
behavioral1
Sample
NEAS.dc2f30c0f6b264bc47ff6420a9a8ca4e.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.dc2f30c0f6b264bc47ff6420a9a8ca4e.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.dc2f30c0f6b264bc47ff6420a9a8ca4e.exe
-
Size
175KB
-
MD5
dc2f30c0f6b264bc47ff6420a9a8ca4e
-
SHA1
26ccb28cde2721029b99f75d432a5fcbf8fbcb07
-
SHA256
e6211b9a6fdf7e795ff58386592b6c8736c334ca96b81c62b6833e92012adfd1
-
SHA512
9027d2082082836dc409772365e065be5615345bb7361bd5679d3ca8e77c2be89818767c913ecc9fa621c9b1eb787b4bd636d50ce29ec42a3e45e913f502f89f
-
SSDEEP
3072:SDSOeCfbJDF8Y8iQsar6K0suoY/96dlL/4bPy:jOeM1OliQ5rsHP/cdJEP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.dc2f30c0f6b264bc47ff6420a9a8ca4e.exe
Files
-
NEAS.dc2f30c0f6b264bc47ff6420a9a8ca4e.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE