Behavioral task
behavioral1
Sample
NEAS.0bc36ec7b564f087e372f7af4ad20820.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.0bc36ec7b564f087e372f7af4ad20820.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.0bc36ec7b564f087e372f7af4ad20820.exe
-
Size
184KB
-
MD5
0bc36ec7b564f087e372f7af4ad20820
-
SHA1
03b805d9be6a0ce307fd0773bde56c1048204d8e
-
SHA256
8858f5ea29bae2772e53336e0b5d006e1a971852df2ee6470554f75fd6884e7b
-
SHA512
df2c3a09c8ebb7f975bfd558303ff7cc83c3e175500df7fdadd7dd180351e8e64e14b95df399c4cddaf8cb454784826b098ad83c5bd8a24513e24093d199772a
-
SSDEEP
3072:AUp5K870wDZA0nwzIFga5tRfaWgirXysv4Wqw3juVD9JaaKWygpf8ZBXGXIRLUZ:vfZ/nwzIhoZib9i0ju9BKVoEZUWLK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0bc36ec7b564f087e372f7af4ad20820.exe
Files
-
NEAS.0bc36ec7b564f087e372f7af4ad20820.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 420KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 329KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE