Behavioral task
behavioral1
Sample
NEAS.168d61ab551a618a9177f43f1cfa9220.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.168d61ab551a618a9177f43f1cfa9220.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.168d61ab551a618a9177f43f1cfa9220.exe
-
Size
50KB
-
MD5
168d61ab551a618a9177f43f1cfa9220
-
SHA1
8851bae8423750141b63cbfd9cf2b6d2d18d2603
-
SHA256
2e42e320f791017332d7d01d94e729fd7825f5cc4f4b215209bf3da557af65ba
-
SHA512
a9557f56aa0b73b2e51f78b59d1fcf808a010cbaca67df2f6d9213b8c64e86d6a4500081df2833a87afb9f468ce2752fe18bfa96148844100047eb19692f7967
-
SSDEEP
768:/gJ9CMXjr1Mx9Vq6Ks4CLK1rMwYLArbgEKLiP4v0BJ/nXX:/gz1qgls1O6wmpO4v0BJ/nX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.168d61ab551a618a9177f43f1cfa9220.exe
Files
-
NEAS.168d61ab551a618a9177f43f1cfa9220.exe.exe windows:5 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE