Behavioral task
behavioral1
Sample
NEAS.bc7a60d348cfe62785a7345a256be4f0.exe
Resource
win7-20230831-en
General
-
Target
NEAS.bc7a60d348cfe62785a7345a256be4f0.exe
-
Size
320KB
-
MD5
bc7a60d348cfe62785a7345a256be4f0
-
SHA1
1b143ca7bf2a420b53f072c1cf80c064d2b8fd30
-
SHA256
4d2222e73378c13f4610452de578479db1a90bce24606cdbefd2b98eaa32e90d
-
SHA512
6181d36c8be095dc0f02a1a390f2bb5111bad33fe3f6461e5a3f3860dd5f6a9bcd2826294a3f8fe998617aba84cbe62f81d646bf39cc9a788b36f4c867d33219
-
SSDEEP
6144:Lcm4FmowdHoSHt251UriZFwfsDX2UznsaFVNJCMK/:R4wFHoSHYHUrAwfMp3CN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.bc7a60d348cfe62785a7345a256be4f0.exe
Files
-
NEAS.bc7a60d348cfe62785a7345a256be4f0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE