Behavioral task
behavioral1
Sample
NEAS.b5c9197f6d5edf7cae29c57a97b3d700.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.b5c9197f6d5edf7cae29c57a97b3d700.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.b5c9197f6d5edf7cae29c57a97b3d700.exe
-
Size
5KB
-
MD5
b5c9197f6d5edf7cae29c57a97b3d700
-
SHA1
bba3953bab74a8acde4521d386342d158b9f8480
-
SHA256
2306429eaa9e4fe0024af94bd19b86e194e25f07e36254ee9f1ed1c9d685fe68
-
SHA512
b4cbdd8211678f52bcf41faed72e65d7b20abb98bdcf050f3d058242bbab601aea931a113bc194050f653624613450226118d6e201ea613ee542851dece1b238
-
SSDEEP
96:hYdqnEeOB3EVbWbKKs3UIfKOxQn1lV7ZK:hGmDO9Xs3HvxQPVI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b5c9197f6d5edf7cae29c57a97b3d700.exe
Files
-
NEAS.b5c9197f6d5edf7cae29c57a97b3d700.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE