Behavioral task
behavioral1
Sample
neurosama.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
neurosama.exe
Resource
win10v2004-20240802-en
General
-
Target
neurosama.exe
-
Size
26.9MB
-
MD5
6a7bef8796c85df1ec698656bca8479e
-
SHA1
30638059df610d5679422bdc875f5f4e8086583e
-
SHA256
6c370351ec6f7cca61f8fadf8658f0b60611a1fda9b01f4db422d912a2f4208d
-
SHA512
6fe9b1041b7c31bd587b104207bb421012571f4ad7b0bbde22c19bf4679b47b00f606710586bde3ed5e542f4b07546fbd3c7a680cc27c8405d5eb38d217d2a89
-
SSDEEP
786432:QS/dQMQumfI4ImpfEYq8xytvwsP9Ji2ySW8xt8oxI2:QS/JQ/KZYlctTPri2ySWVoy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource neurosama.exe
Files
-
neurosama.exe.exe windows:5 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 130KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
main.pyc