Behavioral task
behavioral1
Sample
NEAS.bcce700cd54c6a20a145d8c46cfaf9c0.exe
Resource
win7-20231023-en
General
-
Target
NEAS.bcce700cd54c6a20a145d8c46cfaf9c0.exe
-
Size
643KB
-
MD5
bcce700cd54c6a20a145d8c46cfaf9c0
-
SHA1
b806c9e0806d9098edb0a3666fb82e2cef8f6f42
-
SHA256
a681a67f928d3fd35ce9a3f3045254546ec4bc9a382402c7385c700d9036cd7d
-
SHA512
576db268e2d7098ef80f3c20bf5005626e3cc76bd0f7e7dd92193a3d1b4b046e8ea1a1ad98f2199fb2f240b2205c9666ebb9f3261651c91cc79a34457413ba9f
-
SSDEEP
12288:i+YcUc6SBLLTSEgBAnhc1kGig67w2EMRrKOp93BQOnrQHgaSC9SS:iv2BLHSn6q14m5Oz/LTCf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.bcce700cd54c6a20a145d8c46cfaf9c0.exe
Files
-
NEAS.bcce700cd54c6a20a145d8c46cfaf9c0.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 217KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tqn Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lblsenn Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ufeddpb Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
livqulw Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE