Behavioral task
behavioral1
Sample
NEAS.bd53b7970409e323e2da78b4afe17520.exe
Resource
win7-20231023-en
General
-
Target
NEAS.bd53b7970409e323e2da78b4afe17520.exe
-
Size
1.6MB
-
MD5
bd53b7970409e323e2da78b4afe17520
-
SHA1
2f594d91eff4519079124f42e82ccd2c8b2d9b05
-
SHA256
bc54024c52b5252b5d54fb49f220af27c9cc8ae9dc6e817a0009042f10d0db9d
-
SHA512
f2d2542595d36fc182d96c4e58d41657cdc8dae638dc78fcc1968ed3dd4679fa1c42614ce09e525477bfce5585c735eb18b4e4c334436ded04561d09a0bec8cf
-
SSDEEP
49152:VfyFIPk6BK6BpqE9/2HEl+Z7+HpY9EWfMYFq:kFIdBK6BpqE90Z7+JoEWfRFq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.bd53b7970409e323e2da78b4afe17520.exe
Files
-
NEAS.bd53b7970409e323e2da78b4afe17520.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 4.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE