Behavioral task
behavioral1
Sample
NEAS.bf5d66ce7f2ac7a414c5528e32072490.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.bf5d66ce7f2ac7a414c5528e32072490.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.bf5d66ce7f2ac7a414c5528e32072490.exe
-
Size
433KB
-
MD5
bf5d66ce7f2ac7a414c5528e32072490
-
SHA1
2ad69c29549d2b1326c9573ff91be579955af1d0
-
SHA256
7fb90c15826a6e9220a435325ca04e73a2bd665d2c0a6a92fb2178f6a55bb325
-
SHA512
1c5b82ec0f8567e4c397e92b583edf5ad110432562bb66f5730e2f9427cf1d27828e3cc851390de67bff7f6a07e61f0288ee9347b8aadcfeeaadd2d7096fd5b5
-
SSDEEP
12288:Y7KAnqKJIUADVGBRZJrBFGcyh5SQ2uswvecp7D:Y7KAnqKJIUABGBRbBFGcyh5S1uswvecd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.bf5d66ce7f2ac7a414c5528e32072490.exe
Files
-
NEAS.bf5d66ce7f2ac7a414c5528e32072490.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 340KB - Virtual size: 340KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE