Behavioral task
behavioral1
Sample
NEAS.ca641204f1767e3ecabc5a1ab7a51930.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.ca641204f1767e3ecabc5a1ab7a51930.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.ca641204f1767e3ecabc5a1ab7a51930.exe
-
Size
29KB
-
MD5
ca641204f1767e3ecabc5a1ab7a51930
-
SHA1
1aaf06efcff843b7055addb2b63aa76cb95f2ca2
-
SHA256
5cb715752a10fdc352a276c4f11498a0d647f763c321a6fddb7e86f2e6ce00c8
-
SHA512
ae3676b7b412d05e528a386e32237d6c5d24a277b9235428fcb1c393410b0946f39574d0e9f5c5f5592ffac8c4239aa506947f9f8db1711bc0feea658f9ed6a8
-
SSDEEP
768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/5:AEwVs+0jNDY1qi/qx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.ca641204f1767e3ecabc5a1ab7a51930.exe
Files
-
NEAS.ca641204f1767e3ecabc5a1ab7a51930.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE