Behavioral task
behavioral1
Sample
NEAS.c17b62efe6d10253772a9e69ce8f8680.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.c17b62efe6d10253772a9e69ce8f8680.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.c17b62efe6d10253772a9e69ce8f8680.exe
-
Size
2.0MB
-
MD5
c17b62efe6d10253772a9e69ce8f8680
-
SHA1
af89ada217f6b856d9f3f4368e233fb41460fee7
-
SHA256
8778850336ff967f99e3becd7e8949a382ae7145b581197057d7ffb22f86451b
-
SHA512
2bdd34af6d696125d779eeb11a7858bc4ce663ecf0c54ed44af35d89e96e3530bdeabcc776ed1f885e9215bdfc8730b718df19124fc36e44fc46d332d50c1f2d
-
SSDEEP
49152:Fpot7u4AOwrrEQ/77gATvkLCnlcuAkF4u9W32PDCC:F2urOwrgu/rJnuuf9W32P5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c17b62efe6d10253772a9e69ce8f8680.exe
Files
-
NEAS.c17b62efe6d10253772a9e69ce8f8680.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sy Size: 512B - Virtual size: 4KB