Behavioral task
behavioral1
Sample
NEAS.6bfc6dad4282d704ad057c0dc59f84c0.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.6bfc6dad4282d704ad057c0dc59f84c0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.6bfc6dad4282d704ad057c0dc59f84c0.exe
-
Size
259KB
-
MD5
6bfc6dad4282d704ad057c0dc59f84c0
-
SHA1
f98355b3a0fe72435b1e3b061b65b99db9792dd2
-
SHA256
931a1bad6e71e24a0ec5af6078bb56bb11ce83b82bee36ea48f5800719aa3ba2
-
SHA512
ad8d51dca2ad6efa4293ae31eee41fd2cf223d5e4472a6896d99950bc9bf7888082e0d0a3b35c9c5953dccccad166e2b3267f1a59b3c024a9df7e97a2b95b252
-
SSDEEP
6144:ZjluQoS/Io5Re7mvJo1yMi/5G6eHE3uDYUY:ZEQoS5y6mgMix0OiYD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.6bfc6dad4282d704ad057c0dc59f84c0.exe
Files
-
NEAS.6bfc6dad4282d704ad057c0dc59f84c0.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.exjvk Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ