Behavioral task
behavioral1
Sample
NEAS.12fcb06530132a5f2be73e8a778b9570.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.12fcb06530132a5f2be73e8a778b9570.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.12fcb06530132a5f2be73e8a778b9570.exe
-
Size
965KB
-
MD5
12fcb06530132a5f2be73e8a778b9570
-
SHA1
3bdb3ce8766cf386fadeec4ad9ef1eed503a85e5
-
SHA256
a9303d36c4907bfba74116f4945f88697c50e5e182be4fee54c7e231bf54e9ae
-
SHA512
c7afa02639053f3ba21059fc369d95832db5825b0a1789a369642e1bb1454b2211a7a8260bb70ab2a3e7fae293677fc44ec37d86dcebf9e1e23bd4c23c62935f
-
SSDEEP
24576:JBeIgyDYzfPXRZ3OZWQpnPG/0Hk3qGaIfLEkid:PWSsfPXgWcPnEudkid
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.12fcb06530132a5f2be73e8a778b9570.exe
Files
-
NEAS.12fcb06530132a5f2be73e8a778b9570.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_BIND
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.btnj Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.s Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.t Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE