Behavioral task
behavioral1
Sample
NEAS.a6d1f523a4c0295243be22b075d5bf70.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.a6d1f523a4c0295243be22b075d5bf70.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.a6d1f523a4c0295243be22b075d5bf70.exe
-
Size
1.9MB
-
MD5
a6d1f523a4c0295243be22b075d5bf70
-
SHA1
506b3e9d14e47f43cfb0b454fc28ab1b1f770b07
-
SHA256
02438db90e16bc54868eb4464eb46b2ce2f02fc2c1c58e3d6c9c18fca7b5019a
-
SHA512
dd527c96e83aee3855cfb1a7769842b7e3b86fad8f0770276d10351beb33993a4164de28ddfbdfc2adf486b4b6dac906b0d0d734159244d5223f572103946321
-
SSDEEP
49152:XkAFurhKoRq634omvE6gTfPi9BYV0HYEtF+WlaY:XyYEquPmGPaBYATF+UaY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.a6d1f523a4c0295243be22b075d5bf70.exe
Files
-
NEAS.a6d1f523a4c0295243be22b075d5bf70.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ktlju Size: 4KB - Virtual size: 4KB
.wu Size: 512B - Virtual size: 4KB