Behavioral task
behavioral1
Sample
13c7245a008649c0a3f818266979fc20_NEAS.exe
Resource
win7-20240221-en
General
-
Target
13c7245a008649c0a3f818266979fc20_NEAS
-
Size
122KB
-
MD5
13c7245a008649c0a3f818266979fc20
-
SHA1
bc9037c2331028d991207049b6e6ffaada89ebb7
-
SHA256
10d2f54c78e7f5db6025d7a530a00a6f6fe6ba4c4a108739e40491b816b933f3
-
SHA512
1853b1f0cf73451723e63799b8b13ec9677f03a67f0903f1d19b753717d35ad4b02c3d295643717918a86900bdaf24b73f0a8af1ef87742be81651549406c9d7
-
SSDEEP
3072:9hOmTsF93UYfwC6GIoutz5yLpcka62c+8+dRN14:9cm4FmowdHoSZ6lCX8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13c7245a008649c0a3f818266979fc20_NEAS
Files
-
13c7245a008649c0a3f818266979fc20_NEAS.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE