Behavioral task
behavioral1
Sample
NEAS.98b59ec2fff64cf58ee401a87d7301cf.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.98b59ec2fff64cf58ee401a87d7301cf.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.98b59ec2fff64cf58ee401a87d7301cf.exe
-
Size
774KB
-
MD5
98b59ec2fff64cf58ee401a87d7301cf
-
SHA1
22509f4b24df7845bc1419644e35ccb58c7d695a
-
SHA256
fcb8e29b3dedb1c9d5e1a3f76c46d1a685b2ce0548b0d26ebe5a284885f7c602
-
SHA512
4913b4e955fbc5ad69e9da9b6d518eee2dc3b9b77eb7af11569ae880ac152bfd537f50d0a9d4061b6c2c0bfec99d01f04173367315949843c601ebcd7a9803fb
-
SSDEEP
24576:0er8RRgGEo7NdYzEA52s/nbPWJIpmjvmx:uv977NuzIs/aJIpmqx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.98b59ec2fff64cf58ee401a87d7301cf.exe
Files
-
NEAS.98b59ec2fff64cf58ee401a87d7301cf.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.g Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ