Behavioral task
behavioral1
Sample
NEAS.c5cc0910b38d62c038ea3abd7cfae0c0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.c5cc0910b38d62c038ea3abd7cfae0c0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.c5cc0910b38d62c038ea3abd7cfae0c0.exe
-
Size
197KB
-
MD5
c5cc0910b38d62c038ea3abd7cfae0c0
-
SHA1
6089c5a83052c1a4a3cf6d4ce031d46fd7cd3ce5
-
SHA256
d1b516ca835318a8a12744e2da5c3dce3438299de2ea3eafd56600e67acf97e3
-
SHA512
edc7d5d2e779ba2005dfa77af6d170afd8f3e6887b6e53b74a8d30a8d5298e7cca97585b0c6af1854fc0b1dc609b26fadac0ee5e5e3f0921d2ac7ea86213824d
-
SSDEEP
3072:hF7p74TKhaYjO2bEFzBXrPBa9L55HqZXIjuQcPg8InKz:h0TMjO1Bbc9LHW4KBPg8IKz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c5cc0910b38d62c038ea3abd7cfae0c0.exe
Files
-
NEAS.c5cc0910b38d62c038ea3abd7cfae0c0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 119KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE