Behavioral task
behavioral1
Sample
NEAS.0ed4e45c8ff4c1609ce1c477030e9810.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.0ed4e45c8ff4c1609ce1c477030e9810.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.0ed4e45c8ff4c1609ce1c477030e9810.exe
-
Size
122KB
-
MD5
0ed4e45c8ff4c1609ce1c477030e9810
-
SHA1
45edcc0bf4e4d39788b211806815318513dced9b
-
SHA256
61246344ee8b1a7c9ef2a2f4abc70b84ab71ee2808c8e0d4c90d1d5df77e13ab
-
SHA512
86dbb415f4c1f7df9cff05472ed340c76f5b27fdd7ad681db6b1a27dc79470e7dd0b6743bedb025a6693569f466eab1e2dd9cfc29a7774ee09665035b214304d
-
SSDEEP
3072:9TZo/Ab4YkI0PbQO4NNCl03r032LEwaMMBDkZp/qhWtM2eKdG:9Z9vkZPbr47Cl0g7wfMw8Mtn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0ed4e45c8ff4c1609ce1c477030e9810.exe
Files
-
NEAS.0ed4e45c8ff4c1609ce1c477030e9810.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE