Behavioral task
behavioral1
Sample
NEAS.f66e1292f73993f84133eebda74dd700.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.f66e1292f73993f84133eebda74dd700.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.f66e1292f73993f84133eebda74dd700.exe
-
Size
40KB
-
MD5
f66e1292f73993f84133eebda74dd700
-
SHA1
2f86f694fb0d9f23d3d01a9d706026b681ed9964
-
SHA256
838c78cd06d29c6a86a1298f4d1b9acfbcf03a5c93f4bf5b01a86db44dfa10b8
-
SHA512
e9bd4f422d6b8a9323c7a7f235014635d7f43175db130e56846d9bd0f458eb99cdba37927139376ae5dd1f48c86c8cb906ae387072db1624c4f8c6c5e0010452
-
SSDEEP
384:+bw8E1ob/s2lcRQtHfBF5j2Q9Aa30olDb86nlJRo0AadUz46OXdducA:hSblcRQt5F5qQ9Aakqb8ciaec6OXdg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.f66e1292f73993f84133eebda74dd700.exe
Files
-
NEAS.f66e1292f73993f84133eebda74dd700.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE