Behavioral task
behavioral1
Sample
NEAS.41e87c99a279ffe4800ae34b803bb9a0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.41e87c99a279ffe4800ae34b803bb9a0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.41e87c99a279ffe4800ae34b803bb9a0.exe
-
Size
3.9MB
-
MD5
41e87c99a279ffe4800ae34b803bb9a0
-
SHA1
3e9bd523d0ed8217d835ed1e8c706a1ef27ca2f5
-
SHA256
f36ec34d50c8c8c3079badfa4ca0d190c99711082c229227f299b6ddda1f16ac
-
SHA512
9f571468357d429573ad8c205e6a87bb840e3092771ab3c690e61f75b6fa835a717644e980f49da6bcd03882f893471822545beb491a139af349e7f6b1fc93db
-
SSDEEP
98304:alX3KMj7yBNUVPhd5G0Z5DxdM3hZpmBAlB6D4tyX6kuT4IkQApCgvms0Cv05J5C2:alX3KMj7yBNUVPhd5G0Z5DxdM3hZpmB2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.41e87c99a279ffe4800ae34b803bb9a0.exe
Files
-
NEAS.41e87c99a279ffe4800ae34b803bb9a0.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 584KB - Virtual size: 584KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE