Behavioral task
behavioral1
Sample
NEAS.e99bf59d42371ba9d950efdc5b61a2b0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.e99bf59d42371ba9d950efdc5b61a2b0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.e99bf59d42371ba9d950efdc5b61a2b0.exe
-
Size
2.0MB
-
MD5
e99bf59d42371ba9d950efdc5b61a2b0
-
SHA1
2fd56aafd0b5e49f184d1cf1ce506d3b6a001486
-
SHA256
c56fd42d87c16d69e802cd066721c9138db695658d2cb3707e8cbc11373d3d13
-
SHA512
0b56c751e3c59bb608cae5c8d609f1366e6f8b0e7c41beb8c7a62aa613b5492b955cafdb2453c97305be693e25168ade2a5d778390bc8d40e1b92d86683b3685
-
SSDEEP
49152:4HXFsyY+pYWY4mVURxeKIG2roTtjhH/DYjn3Q5AfPY9dM:4HWV+pj0uR2yjhH/D6nAKPYDM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e99bf59d42371ba9d950efdc5b61a2b0.exe
Files
-
NEAS.e99bf59d42371ba9d950efdc5b61a2b0.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.g Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.d Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE