Behavioral task
behavioral1
Sample
NEAS.608608f630796121c1e3c1644f329280.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.608608f630796121c1e3c1644f329280.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.608608f630796121c1e3c1644f329280.exe
-
Size
525KB
-
MD5
608608f630796121c1e3c1644f329280
-
SHA1
0f701f81342afe8a3284cba03e1b8b65301a2cd3
-
SHA256
3bb18d4da0ae5f00a3b671d86297437e262a3b0e34774902183639870d7ae5b6
-
SHA512
d4cec132f7baeb3841b18cf93710ca84d751f99500c54232a2be03b161803d4021a828a963267d040bc9702108eeee5981f5b69234d20d2242201f6f83d44abf
-
SSDEEP
12288:gLeAdIyp1j79jnCggJ0FuPM+DxH8WURjth1mhP826/jLc1m4h7CSI9H/o/qIwJ:CfCg608PdBURjd2+I1m4hc9QBwJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.608608f630796121c1e3c1644f329280.exe
Files
-
NEAS.608608f630796121c1e3c1644f329280.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE