Behavioral task
behavioral1
Sample
NEAS.5c685106db461773674ccc9523fcdf80.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.5c685106db461773674ccc9523fcdf80.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.5c685106db461773674ccc9523fcdf80.exe
-
Size
360KB
-
MD5
5c685106db461773674ccc9523fcdf80
-
SHA1
8f5da2293ad74356855de43f9dcefb16661421d6
-
SHA256
6647ee25ba6d18098ba3855df8027d016cb709e5f1d08e163f3a0368b630eef8
-
SHA512
be41df64e504f948353c3c32fc6f83c072291aea062999787cf2cf2fc79ca5b14835ee7e60210d8b8ea6935a999afa2939fd46d64200849d1280e8995ce78f41
-
SSDEEP
3072:afjaBhAkgLDleyryoA4J08CXGmwMflSrhMSDADeak7dJHB/AdG:elkgL5dLfJ08CX2ulqMSsQLH5Ad
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.5c685106db461773674ccc9523fcdf80.exe
Files
-
NEAS.5c685106db461773674ccc9523fcdf80.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE