Behavioral task
behavioral1
Sample
NEAS.15bc89ebb066fc1abda11bade53b2c10.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.15bc89ebb066fc1abda11bade53b2c10.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.15bc89ebb066fc1abda11bade53b2c10.exe
-
Size
215KB
-
MD5
15bc89ebb066fc1abda11bade53b2c10
-
SHA1
fd53f602d540869d8ef6d67b2e294f6c4674fca4
-
SHA256
39306180d77c320d47d082479086e077338583c9f55162e9456d8adfd34e9150
-
SHA512
dfe14e3fcf8ce79d3eed6e948d4e65bb8d2a87fedb997d69568e9d2bf0168b8bcff8362a31ec8da7dd200965c86c96e564e24312f11370c7e362f8a3408b14f8
-
SSDEEP
6144:YjluQoStIo5R4nM/40yJawSFCg7XYO0+kkNkr36xBPn:YEQoSnqhawSFmO0hkaEBPn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.15bc89ebb066fc1abda11bade53b2c10.exe
Files
-
NEAS.15bc89ebb066fc1abda11bade53b2c10.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ktlju Size: 4KB - Virtual size: 4KB
.wu Size: 512B - Virtual size: 4KB