NEAS[.]d01b00834f85105a036e449055957410[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d01b00834f85105a036e449055957410.exe
Size

7.5MB
MD5

d01b00834f85105a036e449055957410
SHA1

974e42766a630925bc3811f67ee61916c78e37b8
SHA256

861cf92b7dae39cee51cea269940408b23c5bac629ee0c1a6076b2f7d6a1c54e
SHA512

7409197a937bdc09eec435b812a147d8638e31a0fa9bcf81e348d830d73c3997a0a342c5a20aa7da87dd7084cf6569c257ff1250a3322008f316658a59661853
SSDEEP

196608:5l97FeRQdh0U0wKCe4bYLStoQX9kn9eWGYkzw:5gud/TbYcH9kMWl

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

NEAS.d01b00834f85105a036e449055957410.exe
.exe windows:4 windows x86 arch:x86

Code Sign

07:f4:73:6f:af:ef:40:8a:1f:66:40:f2:65:d1:0a:c1
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

05:cc:07:1e:7a:4e:a1:8c:6f:6a:7d:55:ef:19:66:93
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15/07/2013, 00:00

Not After

20/07/2015, 12:00

Subject

CN=ENC Security Systems B.V.,O=ENC Security Systems B.V.,L=Amsterdam,ST=NH,C=NL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

eb:22:0e:2d:d5:7a:ec:f3:80:da:eb:54:a4:95:76:0d:27:fe:5a:b3
Signer

Actual PE Digest

eb:22:0e:2d:d5:7a:ec:f3:80:da:eb:54:a4:95:76:0d:27:fe:5a:b3

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 10.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 7.2MB - Virtual size: 7.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 234KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

07:f4:73:6f:af:ef:40:8a:1f:66:40:f2:65:d1:0a:c1Certificate

Extended Key Usages

Key Usages

05:cc:07:1e:7a:4e:a1:8c:6f:6a:7d:55:ef:19:66:93Certificate

Extended Key Usages

Key Usages

eb:22:0e:2d:d5:7a:ec:f3:80:da:eb:54:a4:95:76:0d:27:fe:5a:b3Signer

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 10.3MB

UPX1 Size: 7.2MB - Virtual size: 7.2MB

.rsrc Size: 234KB - Virtual size: 236KB

07:f4:73:6f:af:ef:40:8a:1f:66:40:f2:65:d1:0a:c1
Certificate

05:cc:07:1e:7a:4e:a1:8c:6f:6a:7d:55:ef:19:66:93
Certificate

eb:22:0e:2d:d5:7a:ec:f3:80:da:eb:54:a4:95:76:0d:27:fe:5a:b3
Signer

UPX0
Size: - Virtual size: 10.3MB

UPX1
Size: 7.2MB - Virtual size: 7.2MB

.rsrc
Size: 234KB - Virtual size: 236KB