Behavioral task
behavioral1
Sample
NEAS.bc9a4b76b4e06e0c41881a15cec14ef0.exe
Resource
win7-20231020-en
General
-
Target
NEAS.bc9a4b76b4e06e0c41881a15cec14ef0.exe
-
Size
1.8MB
-
MD5
bc9a4b76b4e06e0c41881a15cec14ef0
-
SHA1
dd223fa9240ca9b85332fb8aac4b397f09ebbe09
-
SHA256
e7ce15d296e37bf46143df0108679ee3fdb74b769f2007158a008ac5d12c3081
-
SHA512
dd226a82af3490da23175476deb2b204e7ca48277b02f3e4579520b784d071ca1d40427011e68d40b93e93732951e97af688c0065a59eb0ae21bc9c46637435b
-
SSDEEP
49152:ItclloN8ZRPs6c0pJkGmC7P979xv0AaIiTI6:IGlle8ZRPs6c0pyGZ7pfv0A15
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.bc9a4b76b4e06e0c41881a15cec14ef0.exe
Files
-
NEAS.bc9a4b76b4e06e0c41881a15cec14ef0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 4.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GPhGrRIN Size: 512B - Virtual size: 97B
nABLHQAS Size: 40KB - Virtual size: 40KB
hQSVUWXc Size: 15KB - Virtual size: 14KB
DvsofInc Size: 8KB - Virtual size: 7KB
YbeXsWZp Size: 2KB - Virtual size: 1KB
aHPQoeub Size: 512B - Virtual size: 459B
qnHVSqTe Size: 43KB - Virtual size: 43KB
BGlamzgQ Size: 2KB - Virtual size: 2KB
oBMcyEfs Size: 27KB - Virtual size: 26KB
mGdSaZBT Size: 13KB - Virtual size: 12KB